General

  • Target

    2024-06-13_7d02819cd77d1985a23a61df42b5e4b3_bkransomware

  • Size

    71KB

  • Sample

    240613-d8jhdsshqb

  • MD5

    7d02819cd77d1985a23a61df42b5e4b3

  • SHA1

    6eee099c79f1774c8e62977b7c8648c2ac6bd858

  • SHA256

    bed5c3e8ec90d0065924ae43965c51a141d12327e5a17a8d4039a4130743c42e

  • SHA512

    ae2b50d18a44815cbc0bd248c0de7e9828e4bc767d2f0a53180ea1ad0144720500aae8662631708393bb9072bb1f40ae49d4b5a8c4b86490692fc428c605bc22

  • SSDEEP

    1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTU5i:ZhpAyazIlyazTAi

Malware Config

Targets

    • Target

      2024-06-13_7d02819cd77d1985a23a61df42b5e4b3_bkransomware

    • Size

      71KB

    • MD5

      7d02819cd77d1985a23a61df42b5e4b3

    • SHA1

      6eee099c79f1774c8e62977b7c8648c2ac6bd858

    • SHA256

      bed5c3e8ec90d0065924ae43965c51a141d12327e5a17a8d4039a4130743c42e

    • SHA512

      ae2b50d18a44815cbc0bd248c0de7e9828e4bc767d2f0a53180ea1ad0144720500aae8662631708393bb9072bb1f40ae49d4b5a8c4b86490692fc428c605bc22

    • SSDEEP

      1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTU5i:ZhpAyazIlyazTAi

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks