7847cc4af99e9b1a6592a0988cc1acb417affcb2d007698b28ad37f2d147b16c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-22_4621cd0934c63f9f873a514be079e321_bkransomware
Size

74KB
Sample

240822-f9legs1brb
MD5

4621cd0934c63f9f873a514be079e321
SHA1

710bb655f470ef37e4b9461f69ed282396b29a53
SHA256

7847cc4af99e9b1a6592a0988cc1acb417affcb2d007698b28ad37f2d147b16c
SHA512

51fabf479400ab69237a9afb1ebf092001fc679bc6c9efc98a58d4a8785bc658ded3a5c369e87f35eb30d66841c863c5394d1fb94abb82a8faeb44cdb4092d0e
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTW0:ZhpAyazIlyazTW0

Score

7^/10

discovery persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-08-22_4621cd0934c63f9f873a514be079e321_bkransomware
- Size
  
  74KB
- MD5
  
  4621cd0934c63f9f873a514be079e321
- SHA1
  
  710bb655f470ef37e4b9461f69ed282396b29a53
- SHA256
  
  7847cc4af99e9b1a6592a0988cc1acb417affcb2d007698b28ad37f2d147b16c
- SHA512
  
  51fabf479400ab69237a9afb1ebf092001fc679bc6c9efc98a58d4a8785bc658ded3a5c369e87f35eb30d66841c863c5394d1fb94abb82a8faeb44cdb4092d0e
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTW0:ZhpAyazIlyazTW0
Score

7^/10

discovery persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealer

behavioral2

discoverypersistencespywarestealer