General

  • Target

    2025-02-18_260df35ef3e4174b0dc96a36d38eac47_bkransomware

  • Size

    1.3MB

  • Sample

    250218-lcllwayrel

  • MD5

    260df35ef3e4174b0dc96a36d38eac47

  • SHA1

    21803bf55fea62058a0389914250a8e81c5ff893

  • SHA256

    821972a1e0b3e6f308dcd52228ad238650b6b5acf9176e738def43604efd3ccc

  • SHA512

    e42cfa94d9f8943f9dedb715005ef0ede74115c1f974eadac6d262c9d336df3ea1418930673f5f8c45cdb2abfdde96c80f3a08c267b94dd7073202d4d2dd3365

  • SSDEEP

    12288:9tOw6BaaMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:n6BMSkQ/7Gb8NLEbeZ

Malware Config

Targets

    • Target

      2025-02-18_260df35ef3e4174b0dc96a36d38eac47_bkransomware

    • Size

      1.3MB

    • MD5

      260df35ef3e4174b0dc96a36d38eac47

    • SHA1

      21803bf55fea62058a0389914250a8e81c5ff893

    • SHA256

      821972a1e0b3e6f308dcd52228ad238650b6b5acf9176e738def43604efd3ccc

    • SHA512

      e42cfa94d9f8943f9dedb715005ef0ede74115c1f974eadac6d262c9d336df3ea1418930673f5f8c45cdb2abfdde96c80f3a08c267b94dd7073202d4d2dd3365

    • SSDEEP

      12288:9tOw6BaaMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:n6BMSkQ/7Gb8NLEbeZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks