Overview

overview

10

Static

static

1

2024-10-31...re.exe

windows7-x64

10

2024-10-31...re.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-31_4c53a5c99fd19876647debec527cbb3d_bkransomware

  • Size

    1.4MB

  • Sample

    241031-j33xqsvbld

  • MD5

    4c53a5c99fd19876647debec527cbb3d

  • SHA1

    8e8c52bd88aceab5a52112235456ea4c3f5caff8

  • SHA256

    df79ea1bfe373afbf50b53c59c2c6e569ba9d59eb17404b3bf61056d4be5927c

  • SHA512

    37bfd5ee2e32bd841c59bae8117519cc41d22cb587fce6ddd141f7c8a19d5b39fbf2fe8bbd20c8d862284a2c783626a7ce897dc4b13c03870296f2a71d50ffea

  • SSDEEP

    24576:E308J529+RipvL1SXk1QE1RGOTnIEQc4au9NgxnHNnj2FpTj7/:EEp9+ApwXk1QE1RzsEQPaxHNmj7/

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      2024-10-31_4c53a5c99fd19876647debec527cbb3d_bkransomware

    • Size

      1.4MB

    • MD5

      4c53a5c99fd19876647debec527cbb3d

    • SHA1

      8e8c52bd88aceab5a52112235456ea4c3f5caff8

    • SHA256

      df79ea1bfe373afbf50b53c59c2c6e569ba9d59eb17404b3bf61056d4be5927c

    • SHA512

      37bfd5ee2e32bd841c59bae8117519cc41d22cb587fce6ddd141f7c8a19d5b39fbf2fe8bbd20c8d862284a2c783626a7ce897dc4b13c03870296f2a71d50ffea

    • SSDEEP

      24576:E308J529+RipvL1SXk1QE1RGOTnIEQc4au9NgxnHNnj2FpTj7/:EEp9+ApwXk1QE1RzsEQPaxHNmj7/

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks