General

  • Target

    2024-11-13_21114e1727b622fdb3b3cdb7c4d46d76_bkransomware

  • Size

    1.3MB

  • Sample

    241113-r3yxsatgkr

  • MD5

    21114e1727b622fdb3b3cdb7c4d46d76

  • SHA1

    e0bdce38d148374d7134890de7e7a97e53bf7c65

  • SHA256

    9a957c2a36b0464e2739c9e20a1db9e38f787be165317043f3f91be726fb47e2

  • SHA512

    1435c2bf93b11e0c8fadfd17b591c5e977e765f0f6af0ea9b1f0b21bc38b3895dbc98b9eb390f16935e736b1afa88f1ed077356c051cf067721afb0ca3209e87

  • SSDEEP

    12288:MtOw6BasMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:i6BuSkQ/7Gb8NLEbeZ

Malware Config

Targets

    • Target

      2024-11-13_21114e1727b622fdb3b3cdb7c4d46d76_bkransomware

    • Size

      1.3MB

    • MD5

      21114e1727b622fdb3b3cdb7c4d46d76

    • SHA1

      e0bdce38d148374d7134890de7e7a97e53bf7c65

    • SHA256

      9a957c2a36b0464e2739c9e20a1db9e38f787be165317043f3f91be726fb47e2

    • SHA512

      1435c2bf93b11e0c8fadfd17b591c5e977e765f0f6af0ea9b1f0b21bc38b3895dbc98b9eb390f16935e736b1afa88f1ed077356c051cf067721afb0ca3209e87

    • SSDEEP

      12288:MtOw6BasMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:i6BuSkQ/7Gb8NLEbeZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks