General

  • Target

    2024-11-21_742121073bfc190685455102ec49ccb7_bkransomware

  • Size

    1.3MB

  • Sample

    241121-lhzqpavqcn

  • MD5

    742121073bfc190685455102ec49ccb7

  • SHA1

    7a5aa1a72c7bf2f0aa97aa1c5aacca49a23a1f52

  • SHA256

    b69c20bfe8c30c87ed8d921854abe86a999de01c16a39a5ab44bf26d311431e8

  • SHA512

    6a9badd05b6c6dc02e0cc63213bb75abe50ecdd25bad475acc11c06ce4a7054e2241e23ef83b4d05ebed8fd1dcb401fd2c67346413e8eaa8978ea80e6a229196

  • SSDEEP

    12288:1tOw6BaXMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:/6B7SkQ/7Gb8NLEbeZ

Malware Config

Targets

    • Target

      2024-11-21_742121073bfc190685455102ec49ccb7_bkransomware

    • Size

      1.3MB

    • MD5

      742121073bfc190685455102ec49ccb7

    • SHA1

      7a5aa1a72c7bf2f0aa97aa1c5aacca49a23a1f52

    • SHA256

      b69c20bfe8c30c87ed8d921854abe86a999de01c16a39a5ab44bf26d311431e8

    • SHA512

      6a9badd05b6c6dc02e0cc63213bb75abe50ecdd25bad475acc11c06ce4a7054e2241e23ef83b4d05ebed8fd1dcb401fd2c67346413e8eaa8978ea80e6a229196

    • SSDEEP

      12288:1tOw6BaXMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:/6B7SkQ/7Gb8NLEbeZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks