7f781b930315bdfcbd1832feec7e2896fb1986498157d253895e5bd285d87373 | Triage

Sharing

General

Target

2024-07-22_cbc833251bc03a569b83b78e268acd97_bkransomware
Size

172KB
Sample

240722-tb3g1awcrq
MD5

cbc833251bc03a569b83b78e268acd97
SHA1

3e140a2f507bd8609fdd576075e29de792114ee4
SHA256

7f781b930315bdfcbd1832feec7e2896fb1986498157d253895e5bd285d87373
SHA512

319e733aa718bcf46cb59e85a46d318a596b3763dcaf7c32581acfe8c513a2451fb579edb9c55474a9bad3d09c8c8a22f2e919dcc1135c288cd7299dace71b56
SSDEEP

3072:ZhpAyazIlyazTCKncoIhVA9xce4CLJaPQal7tn3P+Za4:hZMazbnhw+9xj1aYmWd

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-07-22_cbc833251bc03a569b83b78e268acd97_bkransomware
- Size
  
  172KB
- MD5
  
  cbc833251bc03a569b83b78e268acd97
- SHA1
  
  3e140a2f507bd8609fdd576075e29de792114ee4
- SHA256
  
  7f781b930315bdfcbd1832feec7e2896fb1986498157d253895e5bd285d87373
- SHA512
  
  319e733aa718bcf46cb59e85a46d318a596b3763dcaf7c32581acfe8c513a2451fb579edb9c55474a9bad3d09c8c8a22f2e919dcc1135c288cd7299dace71b56
- SSDEEP
  
  3072:ZhpAyazIlyazTCKncoIhVA9xce4CLJaPQal7tn3P+Za4:hZMazbnhw+9xj1aYmWd
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer