b1f39c1ddbab24c60d07d6f37dad7b24428a1d1123a2c76a8bb31729b443d33f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-29_811c9fcad6c4a0a19f75afacf35c1e2b_bkransomware
Size

214KB
Sample

240629-fe7dga1drf
MD5

811c9fcad6c4a0a19f75afacf35c1e2b
SHA1

3cbfcddac2381b213400c78cd7a39b1bc6f5439d
SHA256

b1f39c1ddbab24c60d07d6f37dad7b24428a1d1123a2c76a8bb31729b443d33f
SHA512

0b9e9c790f6b866566b632ae3b719b491976dbba3f703a32dfb453413a4e281a1f5d229126056f3158867591f7a95bb2fa27854dac21268baf9d2cdb3c1297ac
SSDEEP

6144:hZMazqLtHtg7nitqAjpfwYNQQdkUd8hwQt:hS0qL7gedbGM8

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-06-29_811c9fcad6c4a0a19f75afacf35c1e2b_bkransomware
- Size
  
  214KB
- MD5
  
  811c9fcad6c4a0a19f75afacf35c1e2b
- SHA1
  
  3cbfcddac2381b213400c78cd7a39b1bc6f5439d
- SHA256
  
  b1f39c1ddbab24c60d07d6f37dad7b24428a1d1123a2c76a8bb31729b443d33f
- SHA512
  
  0b9e9c790f6b866566b632ae3b719b491976dbba3f703a32dfb453413a4e281a1f5d229126056f3158867591f7a95bb2fa27854dac21268baf9d2cdb3c1297ac
- SSDEEP
  
  6144:hZMazqLtHtg7nitqAjpfwYNQQdkUd8hwQt:hS0qL7gedbGM8
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer