Analysis
-
max time kernel
14s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
10/08/2024, 00:41
General
-
Target
2024-08-10_ee0db1d6d831a47643fcc574b6e505ca_bkransomware.exe
-
Size
1013KB
-
MD5
ee0db1d6d831a47643fcc574b6e505ca
-
SHA1
bd0cb38b5b4f6cf99daf5bdf1691a41c88fba8d5
-
SHA256
8b09391107be60361ee1de4dce94f69e8be775f69719d5a9a449691a9d377218
-
SHA512
058b7479e25646eae96bbad02bb7a50ff8a743519a5c0fbfed83b2a9711b42b23b716d26ce64b227cd2e8a06f7788828381f1c616aeccc5a27fc19bca6f6b60a
-
SSDEEP
24576:e3n/i63ifatr0zAiX90z/F0jsFB3SQkZ:eX/iMGaB0zj0yjoB2
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-10_ee0db1d6d831a47643fcc574b6e505ca_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-10_ee0db1d6d831a47643fcc574b6e505ca_bkransomware.exe"1⤵
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.0MB