General

  • Target

    2024-06-13_d3b25507101c1664beb2e07bc784b0bb_bkransomware

  • Size

    71KB

  • Sample

    240613-eenqpaxbjj

  • MD5

    d3b25507101c1664beb2e07bc784b0bb

  • SHA1

    44762e2e73d6c43cc6f544cd2b78442e7f772c4b

  • SHA256

    e5b966e0e1e54ddf6ea0e78fe0e1bad3c08a7872f789cdde9d5a6a810cbd492b

  • SHA512

    ce21be09b627735dcf49a50605a6776edd33eb58368c9379645b0f7e35fe2c127b5d8ea932c85f25d5e974ff118857aaee83e5c0bec646944b8a7ea2efe122a9

  • SSDEEP

    1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTI:ZhpAyazIlyazTI

Malware Config

Targets

    • Target

      2024-06-13_d3b25507101c1664beb2e07bc784b0bb_bkransomware

    • Size

      71KB

    • MD5

      d3b25507101c1664beb2e07bc784b0bb

    • SHA1

      44762e2e73d6c43cc6f544cd2b78442e7f772c4b

    • SHA256

      e5b966e0e1e54ddf6ea0e78fe0e1bad3c08a7872f789cdde9d5a6a810cbd492b

    • SHA512

      ce21be09b627735dcf49a50605a6776edd33eb58368c9379645b0f7e35fe2c127b5d8ea932c85f25d5e974ff118857aaee83e5c0bec646944b8a7ea2efe122a9

    • SSDEEP

      1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTI:ZhpAyazIlyazTI

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks