General

  • Target

    2024-07-09_a0cd260dcfbc478802522e05a1d251e4_bkransomware

  • Size

    262KB

  • Sample

    240709-wkp95sydlb

  • MD5

    a0cd260dcfbc478802522e05a1d251e4

  • SHA1

    cb185b1ad60a3011ae286d07f0c3de63f7c1081c

  • SHA256

    42baffe6c3ae238bc5e75775efdcf298e2b2dc2b9e3e2845be97d97338d466f6

  • SHA512

    3cd2f768d7046ab21f7377f13c7fe14678a6335881eac40194c4b88fc1c7fb32bf2a949b98249b2910d224174d1fca1e122ee41e4e605860ba274cdda40d1145

  • SSDEEP

    6144:hZMazmT5LVtjxxS/8rBGZfz2ghgYkwrtufAk70Ed4N:hS0sj/S/8cZfhgHwrtufAa0EA

Malware Config

Targets

    • Target

      2024-07-09_a0cd260dcfbc478802522e05a1d251e4_bkransomware

    • Size

      262KB

    • MD5

      a0cd260dcfbc478802522e05a1d251e4

    • SHA1

      cb185b1ad60a3011ae286d07f0c3de63f7c1081c

    • SHA256

      42baffe6c3ae238bc5e75775efdcf298e2b2dc2b9e3e2845be97d97338d466f6

    • SHA512

      3cd2f768d7046ab21f7377f13c7fe14678a6335881eac40194c4b88fc1c7fb32bf2a949b98249b2910d224174d1fca1e122ee41e4e605860ba274cdda40d1145

    • SSDEEP

      6144:hZMazmT5LVtjxxS/8rBGZfz2ghgYkwrtufAk70Ed4N:hS0sj/S/8cZfhgHwrtufAa0EA

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks