General

  • Target

    2024-06-13_2bba3977125de893ab5fd1c7383e26d4_bkransomware

  • Size

    71KB

  • Sample

    240613-e11blsxfrq

  • MD5

    2bba3977125de893ab5fd1c7383e26d4

  • SHA1

    b4d5e65e34bd85188d9456a89a5f04cbede42e6d

  • SHA256

    3cc717b344f1164fe5eaff17596dfd2ce49ba8ab50cf07bf068c5df52a1c8d0f

  • SHA512

    a306d421137682cc04adea7a6ad12a635b5215e93251b02cbf27ccf0711d17e8daaa04cdbabcec9bd7c7e26a5687dfa48d8fab52239c0631741c58b44fa3474f

  • SSDEEP

    1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT9:ZhpAyazIlyazT9

Malware Config

Targets

    • Target

      2024-06-13_2bba3977125de893ab5fd1c7383e26d4_bkransomware

    • Size

      71KB

    • MD5

      2bba3977125de893ab5fd1c7383e26d4

    • SHA1

      b4d5e65e34bd85188d9456a89a5f04cbede42e6d

    • SHA256

      3cc717b344f1164fe5eaff17596dfd2ce49ba8ab50cf07bf068c5df52a1c8d0f

    • SHA512

      a306d421137682cc04adea7a6ad12a635b5215e93251b02cbf27ccf0711d17e8daaa04cdbabcec9bd7c7e26a5687dfa48d8fab52239c0631741c58b44fa3474f

    • SSDEEP

      1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT9:ZhpAyazIlyazT9

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks