General

  • Target

    2024-11-21_829b8238f3ed9820be1c6ad5976aa6ae_bkransomware

  • Size

    1.6MB

  • Sample

    241121-lsmtwa1gpp

  • MD5

    829b8238f3ed9820be1c6ad5976aa6ae

  • SHA1

    357b87f0936b5c86594152d37d7d72ca31a4ab0a

  • SHA256

    1feff821225e80848e00c76a2e1071d15e6096fe0da6bbf8e21594348578f646

  • SHA512

    85232d431b53700043b798625a55322e239276cb836900c4153c7607661389ce18a3f371c5428ec61bdc29e727a38d6e58a3e8031c029cd403f178a77f54af48

  • SSDEEP

    24576:S6B88NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:/B8gDUYmvFur31yAipQCtXxc0H

Malware Config

Targets

    • Target

      2024-11-21_829b8238f3ed9820be1c6ad5976aa6ae_bkransomware

    • Size

      1.6MB

    • MD5

      829b8238f3ed9820be1c6ad5976aa6ae

    • SHA1

      357b87f0936b5c86594152d37d7d72ca31a4ab0a

    • SHA256

      1feff821225e80848e00c76a2e1071d15e6096fe0da6bbf8e21594348578f646

    • SHA512

      85232d431b53700043b798625a55322e239276cb836900c4153c7607661389ce18a3f371c5428ec61bdc29e727a38d6e58a3e8031c029cd403f178a77f54af48

    • SSDEEP

      24576:S6B88NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:/B8gDUYmvFur31yAipQCtXxc0H

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks