f8b20c87d61ff21fe2b18b18e8762a502771dbe2438607754bec98ab7e26cf65 | Triage

Sharing

General

Target

2024-07-05_cfa38e1cdcda6caf3984b4f7874dee13_bkransomware
Size

71KB
Sample

240705-3medzs1gre
MD5

cfa38e1cdcda6caf3984b4f7874dee13
SHA1

1ddc102437981147814ea6e7f2db343251d1dc47
SHA256

f8b20c87d61ff21fe2b18b18e8762a502771dbe2438607754bec98ab7e26cf65
SHA512

e7d25eccadd4e4ed519478431b72f110451357a63f82aa11290bb02d3b02a67799b69f1db0359c5397a6b2a2a3d471dddd174b3e3f32749c03b79b5e4d8411db
SSDEEP

1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTG:ZRpAyazIliazTG

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-07-05_cfa38e1cdcda6caf3984b4f7874dee13_bkransomware
- Size
  
  71KB
- MD5
  
  cfa38e1cdcda6caf3984b4f7874dee13
- SHA1
  
  1ddc102437981147814ea6e7f2db343251d1dc47
- SHA256
  
  f8b20c87d61ff21fe2b18b18e8762a502771dbe2438607754bec98ab7e26cf65
- SHA512
  
  e7d25eccadd4e4ed519478431b72f110451357a63f82aa11290bb02d3b02a67799b69f1db0359c5397a6b2a2a3d471dddd174b3e3f32749c03b79b5e4d8411db
- SSDEEP
  
  1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTG:ZRpAyazIliazTG
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer