General

  • Target

    2024-04-28_79c0aed50cafb396c22784ca72cb0575_bkransomware_karagany

  • Size

    677KB

  • Sample

    240428-ns6yvseg86

  • MD5

    79c0aed50cafb396c22784ca72cb0575

  • SHA1

    2bc9776c62cae0e7e136f125295302df3bdd9430

  • SHA256

    954653909fb259356663f321718056d0d3941c0c9a1ca387300fbe646253eb79

  • SHA512

    1c69960056ee11115bef72240193ccd8f81c10c93b052f18f9ee04f0290c1ef3fcacd70278b27974e69d4a2ed908db5bf7c8de3f7de7b1ab6d6dce8e3950268d

  • SSDEEP

    12288:rvXk1yoH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:Lk1B2JOt934J7Z6bQaj1BvUm9J

Score
7/10

Malware Config

Targets

    • Target

      2024-04-28_79c0aed50cafb396c22784ca72cb0575_bkransomware_karagany

    • Size

      677KB

    • MD5

      79c0aed50cafb396c22784ca72cb0575

    • SHA1

      2bc9776c62cae0e7e136f125295302df3bdd9430

    • SHA256

      954653909fb259356663f321718056d0d3941c0c9a1ca387300fbe646253eb79

    • SHA512

      1c69960056ee11115bef72240193ccd8f81c10c93b052f18f9ee04f0290c1ef3fcacd70278b27974e69d4a2ed908db5bf7c8de3f7de7b1ab6d6dce8e3950268d

    • SSDEEP

      12288:rvXk1yoH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:Lk1B2JOt934J7Z6bQaj1BvUm9J

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks