f29030b23111cefdecfd274cb4f994b8c348dfaa3c1045fdf788ce7c0acfc03b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-27_32b1f5e2c4865ce3bfc29196fe2fb5dc_bkransomware
Size

71KB
Sample

240627-r3mvhswcjb
MD5

32b1f5e2c4865ce3bfc29196fe2fb5dc
SHA1

1c569aaf5e4fcc0a2b0ab6a3b1a630dde09f9b8c
SHA256

f29030b23111cefdecfd274cb4f994b8c348dfaa3c1045fdf788ce7c0acfc03b
SHA512

02c27a20ac41eefc9e894d22057f2a36550101d78f554329f6793ce71616427202d2e28ceaa6424c24b7b30af8175b7ce63cc8ec02e56646872a22c7bb690fcb
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTk:ZhpAyazIlyazTk

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-06-27_32b1f5e2c4865ce3bfc29196fe2fb5dc_bkransomware
- Size
  
  71KB
- MD5
  
  32b1f5e2c4865ce3bfc29196fe2fb5dc
- SHA1
  
  1c569aaf5e4fcc0a2b0ab6a3b1a630dde09f9b8c
- SHA256
  
  f29030b23111cefdecfd274cb4f994b8c348dfaa3c1045fdf788ce7c0acfc03b
- SHA512
  
  02c27a20ac41eefc9e894d22057f2a36550101d78f554329f6793ce71616427202d2e28ceaa6424c24b7b30af8175b7ce63cc8ec02e56646872a22c7bb690fcb
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTk:ZhpAyazIlyazTk
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer