General

  • Target

    2024-08-10_67182628c3b5f3b3dc72709479b2a446_bkransomware

  • Size

    1013KB

  • Sample

    240810-b1yagazdlj

  • MD5

    67182628c3b5f3b3dc72709479b2a446

  • SHA1

    8a4edc8419021d839a451d421cf161a072942ff1

  • SHA256

    890cd3bde7738ae3dac25a94cee055c09978d750c3fe76eb88f62b0210c75d5c

  • SHA512

    e107c12da431169b1f6b7de16b956a36a344d07f9d56a0097f71afdef9ca80a3823bced06cc9a81b18258b6104d312864fa9969df047dc216b1753f4439eba73

  • SSDEEP

    12288:885bM3nmxYfj63hgD1ZigKXqRXRvl6cr8Ggd0RPTrgNgYoi3ydTdKIlB:u3nmi63ikaRX5yGzfgEqqKIl

Malware Config

Targets

    • Target

      2024-08-10_67182628c3b5f3b3dc72709479b2a446_bkransomware

    • Size

      1013KB

    • MD5

      67182628c3b5f3b3dc72709479b2a446

    • SHA1

      8a4edc8419021d839a451d421cf161a072942ff1

    • SHA256

      890cd3bde7738ae3dac25a94cee055c09978d750c3fe76eb88f62b0210c75d5c

    • SHA512

      e107c12da431169b1f6b7de16b956a36a344d07f9d56a0097f71afdef9ca80a3823bced06cc9a81b18258b6104d312864fa9969df047dc216b1753f4439eba73

    • SSDEEP

      12288:885bM3nmxYfj63hgD1ZigKXqRXRvl6cr8Ggd0RPTrgNgYoi3ydTdKIlB:u3nmi63ikaRX5yGzfgEqqKIl

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks