General

  • Target

    2024-08-10_8a586a05ecf91b8874351731012d18ff_bkransomware

  • Size

    1.3MB

  • Sample

    240810-lfdenstfnm

  • MD5

    8a586a05ecf91b8874351731012d18ff

  • SHA1

    af1e1fdc40e98cc82a4c73060407b7c072a3a6dc

  • SHA256

    1573a03279d54ebce66b91825a6cdab0a123792c7c77077e9edbc64eb5078a3f

  • SHA512

    72acdfec4247006959ea16fe022f73663db1ab947c37a7974f1510143cab8daaa84a20ea2956b7377e1c2f0ab400405f4523050c357873a014f5f9dd0ba69702

  • SSDEEP

    12288:GtOw6BaTMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:46BvSkQ/7Gb8NLEbeZ

Malware Config

Targets

    • Target

      2024-08-10_8a586a05ecf91b8874351731012d18ff_bkransomware

    • Size

      1.3MB

    • MD5

      8a586a05ecf91b8874351731012d18ff

    • SHA1

      af1e1fdc40e98cc82a4c73060407b7c072a3a6dc

    • SHA256

      1573a03279d54ebce66b91825a6cdab0a123792c7c77077e9edbc64eb5078a3f

    • SHA512

      72acdfec4247006959ea16fe022f73663db1ab947c37a7974f1510143cab8daaa84a20ea2956b7377e1c2f0ab400405f4523050c357873a014f5f9dd0ba69702

    • SSDEEP

      12288:GtOw6BaTMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:46BvSkQ/7Gb8NLEbeZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks