General

  • Target

    2024-08-05_7493e9beff0240961b3066466c0871a5_bkransomware

  • Size

    1.3MB

  • Sample

    240805-lh8zcswepg

  • MD5

    7493e9beff0240961b3066466c0871a5

  • SHA1

    6a1432b5dd758a526886dd05ae581e3f8dffa363

  • SHA256

    68bf548298f4ede55d1badc2f5d2e348896525416a66b93211ef4b1e1fee5a14

  • SHA512

    7905e1e6a60e1576a8b6a4023a2930c8d6f0aad3cba8cd745b04cab55195ff9bf9c62cbe9a2d5682c2eb67896f21f88490a9483e7b513c9ce021acce7e72ae6a

  • SSDEEP

    12288:NtOw6BayKA5kfGyUL7L8mv39gMAJsRREk2UbCbbwedMmG9HykIsffEBcT:X6BvKIuIL7V/9gJUR6fb477nfsBc

Malware Config

Targets

    • Target

      2024-08-05_7493e9beff0240961b3066466c0871a5_bkransomware

    • Size

      1.3MB

    • MD5

      7493e9beff0240961b3066466c0871a5

    • SHA1

      6a1432b5dd758a526886dd05ae581e3f8dffa363

    • SHA256

      68bf548298f4ede55d1badc2f5d2e348896525416a66b93211ef4b1e1fee5a14

    • SHA512

      7905e1e6a60e1576a8b6a4023a2930c8d6f0aad3cba8cd745b04cab55195ff9bf9c62cbe9a2d5682c2eb67896f21f88490a9483e7b513c9ce021acce7e72ae6a

    • SSDEEP

      12288:NtOw6BayKA5kfGyUL7L8mv39gMAJsRREk2UbCbbwedMmG9HykIsffEBcT:X6BvKIuIL7V/9gJUR6fb477nfsBc

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks