Analysis
-
max time kernel
79s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
06/09/2024, 19:49
General
-
Target
2024-09-06_d3dc5bae74cbdbe66d47b730efb8caf7_bkransomware.exe
-
Size
3.6MB
-
MD5
d3dc5bae74cbdbe66d47b730efb8caf7
-
SHA1
0c9b3433fc31bc2c3d7d280f0b14a4ae2be8dea5
-
SHA256
660287fdeef5e5f7156e2728ec6c201db7889f5d7031c37abb8430c681d7b0a0
-
SHA512
e159444dcee00bd3928cb896fb1821d37eb2dfc4ecf8a873d334910fcfc76a6d4e7fbb024004e6198c0b4cfa9ed1b58773a97c89be4c4f13c7b537f33f0aafa0
-
SSDEEP
98304:Mfq2fVgLGs7ANGWiUXFa41R+c16LUIRtvxbJiaZEBkIRTHuRiM5e09PK8LG+:KChb4yHxbJiaZeIC8LR
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-06_d3dc5bae74cbdbe66d47b730efb8caf7_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-06_d3dc5bae74cbdbe66d47b730efb8caf7_bkransomware.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx