a2dd80fe1e4dd9be36384daebd6a9032b50c773e6395b87497908c44223211d6 | Triage

Sharing

General

Target

2024-07-09_1387bbc0f63b3efac376af8c90ad860c_bkransomware
Size

71KB
Sample

240709-e2b1eaybqg
MD5

1387bbc0f63b3efac376af8c90ad860c
SHA1

78a0862458677c2e48d454e4b28c149e4efe1b6d
SHA256

a2dd80fe1e4dd9be36384daebd6a9032b50c773e6395b87497908c44223211d6
SHA512

7e34b418fad8cd9b0d36911e2efe39c8c4860a4ec675806fd7a8eb3647132bbe80c74060aca0637a690c03517d7a4af711ef4bda5ffc4c5f48357c1dac626711
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT/:ZhpAyazIlyazT/

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-07-09_1387bbc0f63b3efac376af8c90ad860c_bkransomware
- Size
  
  71KB
- MD5
  
  1387bbc0f63b3efac376af8c90ad860c
- SHA1
  
  78a0862458677c2e48d454e4b28c149e4efe1b6d
- SHA256
  
  a2dd80fe1e4dd9be36384daebd6a9032b50c773e6395b87497908c44223211d6
- SHA512
  
  7e34b418fad8cd9b0d36911e2efe39c8c4860a4ec675806fd7a8eb3647132bbe80c74060aca0637a690c03517d7a4af711ef4bda5ffc4c5f48357c1dac626711
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT/:ZhpAyazIlyazT/
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer