Overview

overview

7

Static

static

3

2024-06-27...re.exe

windows7-x64

7

2024-06-27...re.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-27_aa0c0d4b9277d0b89f00ed3cfe5fb93f_bkransomware

  • Size

    395KB

  • Sample

    240627-s7dm3syblc

  • MD5

    aa0c0d4b9277d0b89f00ed3cfe5fb93f

  • SHA1

    bdde18d70b192ebd8dea1f9cf47f79eaa27b3fc1

  • SHA256

    7fd51e53d625da77f8ac56b87296656c137890b963891af1c4efa59dc2e10d3e

  • SHA512

    81f546dc19a8b4d617111cc088ce3cae60fb96792893f5b736a37c5684b5e543f334bebf85778ec11b291c8d8708e46972e7920a131cb77b77afb0b694fea56b

  • SSDEEP

    6144:hZMaz98djM9eOFYHwQXbtbpVDGrNkqSn8jxPH0X0yOKqMBsKQh6mZnagQGtR:hS098JM9eOFYQMLV6pyX9MHbZZtR

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      2024-06-27_aa0c0d4b9277d0b89f00ed3cfe5fb93f_bkransomware

    • Size

      395KB

    • MD5

      aa0c0d4b9277d0b89f00ed3cfe5fb93f

    • SHA1

      bdde18d70b192ebd8dea1f9cf47f79eaa27b3fc1

    • SHA256

      7fd51e53d625da77f8ac56b87296656c137890b963891af1c4efa59dc2e10d3e

    • SHA512

      81f546dc19a8b4d617111cc088ce3cae60fb96792893f5b736a37c5684b5e543f334bebf85778ec11b291c8d8708e46972e7920a131cb77b77afb0b694fea56b

    • SSDEEP

      6144:hZMaz98djM9eOFYHwQXbtbpVDGrNkqSn8jxPH0X0yOKqMBsKQh6mZnagQGtR:hS098JM9eOFYQMLV6pyX9MHbZZtR

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks