General

  • Target

    2024-10-17_ea29b303e44c81e5ab9e4c171f42c323_bkransomware

  • Size

    712KB

  • Sample

    241017-zkzelaydnl

  • MD5

    ea29b303e44c81e5ab9e4c171f42c323

  • SHA1

    e962fd858d0803c7559914fb7c63f0d05dbaa9d1

  • SHA256

    eebcb375c2a4ec1a0225ebba639800f91ecf6980544844a038b5a3f9525ab408

  • SHA512

    7a5c43de425fdd9d9b66f29225d54e4bcf33a754c2249ad8a96de6e2e231ed34aea1ce194ff2c9edaa728b35c6a92b501349eb71734ebe531a01fedbaaf68f1c

  • SSDEEP

    12288:4tOw6BafgfwWZF/xZ+2r4O+Jr/Yo6hUGCW4VP5zZWZG00B:G6B1HxP4O+lwo6hUPVhx00

Malware Config

Targets

    • Target

      2024-10-17_ea29b303e44c81e5ab9e4c171f42c323_bkransomware

    • Size

      712KB

    • MD5

      ea29b303e44c81e5ab9e4c171f42c323

    • SHA1

      e962fd858d0803c7559914fb7c63f0d05dbaa9d1

    • SHA256

      eebcb375c2a4ec1a0225ebba639800f91ecf6980544844a038b5a3f9525ab408

    • SHA512

      7a5c43de425fdd9d9b66f29225d54e4bcf33a754c2249ad8a96de6e2e231ed34aea1ce194ff2c9edaa728b35c6a92b501349eb71734ebe531a01fedbaaf68f1c

    • SSDEEP

      12288:4tOw6BafgfwWZF/xZ+2r4O+Jr/Yo6hUGCW4VP5zZWZG00B:G6B1HxP4O+lwo6hUPVhx00

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks