Overview

overview

7

Static

static

3

2024-07-25...re.exe

windows7-x64

7

2024-07-25...re.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-07-25_bd8899fbdc159749e0d31fe4b4d9adcf_bkransomware

  • Size

    712KB

  • Sample

    240725-m871esvfqn

  • MD5

    bd8899fbdc159749e0d31fe4b4d9adcf

  • SHA1

    e63f7af269a165b170be141555167f901fd5545a

  • SHA256

    538cecdb554a358fff8323704b0c50c7a4cc1fca55c7098b5ccfc2ce68a824ff

  • SHA512

    97616a7ae5cc458e51af9d927dc7ab33586607bbb2c0542c4420dedcaa183c649ce9ceeee22de6904c62adc7092c967e9eb1e4903bbf12c5d2b7f1fe9d04b7e9

  • SSDEEP

    12288:ztOw6BaixoIHJcxlOMRMVpZ8IQ3L5AQJWVGAGl4FsxBzOSADzRyfB+VTC:h6BmIHJcxlfR4sL5AGF9lxxBLAOEG

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-07-25_bd8899fbdc159749e0d31fe4b4d9adcf_bkransomware

    • Size

      712KB

    • MD5

      bd8899fbdc159749e0d31fe4b4d9adcf

    • SHA1

      e63f7af269a165b170be141555167f901fd5545a

    • SHA256

      538cecdb554a358fff8323704b0c50c7a4cc1fca55c7098b5ccfc2ce68a824ff

    • SHA512

      97616a7ae5cc458e51af9d927dc7ab33586607bbb2c0542c4420dedcaa183c649ce9ceeee22de6904c62adc7092c967e9eb1e4903bbf12c5d2b7f1fe9d04b7e9

    • SSDEEP

      12288:ztOw6BaixoIHJcxlOMRMVpZ8IQ3L5AQJWVGAGl4FsxBzOSADzRyfB+VTC:h6BmIHJcxlfR4sL5AGF9lxxBLAOEG

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks