5b24dabf37d1b095c9e7e9a3f9751b30cfcef17b974a339d64d1ed61f29657c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-10_128d026cde259f7a81096d1af73f5570_bkransomware
Size

71KB
Sample

240710-rq4mhavfpd
MD5

128d026cde259f7a81096d1af73f5570
SHA1

8cf7e5f857d069740083e6923fdc513ed92ab471
SHA256

5b24dabf37d1b095c9e7e9a3f9751b30cfcef17b974a339d64d1ed61f29657c1
SHA512

bd23b03dc5641c8a87fd108aeab4becdc7be35576ea2fdbf1c27e887998cc1cc7a735af68c94180b46d23cd0a95b9fd2b7daad9fc1fb708460e54a2eeea66470
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTN:ZhpAyazIlyazTN

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-07-10_128d026cde259f7a81096d1af73f5570_bkransomware
- Size
  
  71KB
- MD5
  
  128d026cde259f7a81096d1af73f5570
- SHA1
  
  8cf7e5f857d069740083e6923fdc513ed92ab471
- SHA256
  
  5b24dabf37d1b095c9e7e9a3f9751b30cfcef17b974a339d64d1ed61f29657c1
- SHA512
  
  bd23b03dc5641c8a87fd108aeab4becdc7be35576ea2fdbf1c27e887998cc1cc7a735af68c94180b46d23cd0a95b9fd2b7daad9fc1fb708460e54a2eeea66470
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTN:ZhpAyazIlyazTN
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer