General
-
Target
2024-04-19_22c39f4968f8d22cc2b6a35ec53b3b8d_karagany_mafia
-
Size
250KB
-
Sample
240419-d495jsfe83
-
MD5
22c39f4968f8d22cc2b6a35ec53b3b8d
-
SHA1
c3c0e06701b06602988636e4515e37db9e09bd67
-
SHA256
56facd344caf03ac7b5ca3dfa2e7607636af44b4799bd99022a336adaf7717dc
-
SHA512
794ded2a83c90dbbae88e4966240115e64388a756efce43045c204249439ef35a0eb4cad022e42883ca990652e0a291d79648c50bedf2ee661aa00c27fe4cf2e
-
SSDEEP
3072:I/yK5d0Gj0+nY3uEBLvBNfdUR2/qFnB8o2+vU3WuvIBuj00nReaXkuSQ7cdOd3:I/y20Gj0r+EBFrkvlU3RvIUDOIN
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-19_22c39f4968f8d22cc2b6a35ec53b3b8d_karagany_mafia.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-19_22c39f4968f8d22cc2b6a35ec53b3b8d_karagany_mafia.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-19_22c39f4968f8d22cc2b6a35ec53b3b8d_karagany_mafia
-
Size
250KB
-
MD5
22c39f4968f8d22cc2b6a35ec53b3b8d
-
SHA1
c3c0e06701b06602988636e4515e37db9e09bd67
-
SHA256
56facd344caf03ac7b5ca3dfa2e7607636af44b4799bd99022a336adaf7717dc
-
SHA512
794ded2a83c90dbbae88e4966240115e64388a756efce43045c204249439ef35a0eb4cad022e42883ca990652e0a291d79648c50bedf2ee661aa00c27fe4cf2e
-
SSDEEP
3072:I/yK5d0Gj0+nY3uEBLvBNfdUR2/qFnB8o2+vU3WuvIBuj00nReaXkuSQ7cdOd3:I/y20Gj0r+EBFrkvlU3RvIUDOIN
Score10/10-
GandCrab payload
-
Detects Reflective DLL injection artifacts
-
Detects ransomware indicator
-
Gandcrab Payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-