General

  • Target

    2024-08-10_f6847ab67e21a9dd8b96a09b80daa65c_bkransomware

  • Size

    712KB

  • Sample

    240810-c5f3esweja

  • MD5

    f6847ab67e21a9dd8b96a09b80daa65c

  • SHA1

    e33fb83ab7c248491dd27b8462276b9f75443aa6

  • SHA256

    77a7216e9d954df5898451cb6f61a150cca9e6fec76004a191a2fddc195d5dec

  • SHA512

    ea99e7276be1302ab1ef50be21d5857d54722273492662961cb2cb9a1d4d332a766984f95f7ffed99ae70efc5bf68fe251d9d9d55be144a1b6bced8161d39747

  • SSDEEP

    12288:/tOw6BaWMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:16B8SkQ/7Gb8NLEbeZ

Malware Config

Targets

    • Target

      2024-08-10_f6847ab67e21a9dd8b96a09b80daa65c_bkransomware

    • Size

      712KB

    • MD5

      f6847ab67e21a9dd8b96a09b80daa65c

    • SHA1

      e33fb83ab7c248491dd27b8462276b9f75443aa6

    • SHA256

      77a7216e9d954df5898451cb6f61a150cca9e6fec76004a191a2fddc195d5dec

    • SHA512

      ea99e7276be1302ab1ef50be21d5857d54722273492662961cb2cb9a1d4d332a766984f95f7ffed99ae70efc5bf68fe251d9d9d55be144a1b6bced8161d39747

    • SSDEEP

      12288:/tOw6BaWMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:16B8SkQ/7Gb8NLEbeZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks