2e3121665cdbfce38397dd3bac37f9f39bc1855bd7001dd8079ef464c1ce49fc | Triage

Sharing

General

Target

2024-07-01_1359d2fdab871eafae407b3b7f9c5514_bkransomware
Size

96KB
Sample

240701-eyzmaszalj
MD5

1359d2fdab871eafae407b3b7f9c5514
SHA1

7bd60c4c3f302e150f96a05cc9f57e0d1e2015be
SHA256

2e3121665cdbfce38397dd3bac37f9f39bc1855bd7001dd8079ef464c1ce49fc
SHA512

2d368ebb29d54c4e05e184eb8f2e447762cf49210c2b8cb5ce48bdda20cae8f00f54b376eb95c644760abc2991de41bdcce098acea2186e0abe73dac3dd6df54
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTWE7dVzhjq9gJO:ZhpAyazIlyazTzdVzhjq9gQ

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-07-01_1359d2fdab871eafae407b3b7f9c5514_bkransomware
- Size
  
  96KB
- MD5
  
  1359d2fdab871eafae407b3b7f9c5514
- SHA1
  
  7bd60c4c3f302e150f96a05cc9f57e0d1e2015be
- SHA256
  
  2e3121665cdbfce38397dd3bac37f9f39bc1855bd7001dd8079ef464c1ce49fc
- SHA512
  
  2d368ebb29d54c4e05e184eb8f2e447762cf49210c2b8cb5ce48bdda20cae8f00f54b376eb95c644760abc2991de41bdcce098acea2186e0abe73dac3dd6df54
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTWE7dVzhjq9gJO:ZhpAyazIlyazTzdVzhjq9gQ
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer