General

  • Target

    2024-06-30_8792c38d1954f8258fd9a212d9354493_bkransomware

  • Size

    96KB

  • Sample

    240630-khaacsvgle

  • MD5

    8792c38d1954f8258fd9a212d9354493

  • SHA1

    d710bf79499a6da61a5fe05a23bdc4f612d5a327

  • SHA256

    1d11e372c8d9321b9f460241dcbb19a8fd6da79b6aaf3412bb6270cd6a8d3b6c

  • SHA512

    66d2fa8f77b2c8fb272a9a56a620b65715a90e20214bf16d3759040983a67c83d9776341b43b7eb08989007f09f69d7932871338560bf8e618752ce79145b1c8

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTMi4Bep6CU6m8DoconT:ZRpAyazIliazTgi6h6meocoT

Malware Config

Targets

    • Target

      2024-06-30_8792c38d1954f8258fd9a212d9354493_bkransomware

    • Size

      96KB

    • MD5

      8792c38d1954f8258fd9a212d9354493

    • SHA1

      d710bf79499a6da61a5fe05a23bdc4f612d5a327

    • SHA256

      1d11e372c8d9321b9f460241dcbb19a8fd6da79b6aaf3412bb6270cd6a8d3b6c

    • SHA512

      66d2fa8f77b2c8fb272a9a56a620b65715a90e20214bf16d3759040983a67c83d9776341b43b7eb08989007f09f69d7932871338560bf8e618752ce79145b1c8

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTMi4Bep6CU6m8DoconT:ZRpAyazIliazTgi6h6meocoT

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks