General

  • Target

    2024-07-09_5848faf08ce9b4e6e3e62260f78f9a7f_bkransomware

  • Size

    645KB

  • Sample

    240709-sbdyza1cjh

  • MD5

    5848faf08ce9b4e6e3e62260f78f9a7f

  • SHA1

    2b8aae61d41e7777951f0c183bf88de541a8c6ac

  • SHA256

    8734bb78db68a96a6752b550e9a9cbbab09fd6cd857278299e52115091e886a3

  • SHA512

    be070905bb6ce515d4820ad93c66c811ace2958badf1986283d3cbf5b694735caf4022a721d2fc9d199fc15baa8706bd05c59456aec0662ec311a15aa45cedff

  • SSDEEP

    12288:hS0LlHsL0bzj3BeOVWZY9blJCxpPl9Ohqq7HaP1mj04SPkkNehr:DN3jQOVWZYFxj7YxDkGKr

Malware Config

Targets

    • Target

      2024-07-09_5848faf08ce9b4e6e3e62260f78f9a7f_bkransomware

    • Size

      645KB

    • MD5

      5848faf08ce9b4e6e3e62260f78f9a7f

    • SHA1

      2b8aae61d41e7777951f0c183bf88de541a8c6ac

    • SHA256

      8734bb78db68a96a6752b550e9a9cbbab09fd6cd857278299e52115091e886a3

    • SHA512

      be070905bb6ce515d4820ad93c66c811ace2958badf1986283d3cbf5b694735caf4022a721d2fc9d199fc15baa8706bd05c59456aec0662ec311a15aa45cedff

    • SSDEEP

      12288:hS0LlHsL0bzj3BeOVWZY9blJCxpPl9Ohqq7HaP1mj04SPkkNehr:DN3jQOVWZYFxj7YxDkGKr

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks