Overview

overview

7

Static

static

3

2024-04-29...ny.exe

windows7-x64

7

2024-04-29...ny.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-29_fe3f3a7dff24b0006687a73135bf3d57_bkransomware_karagany

  • Size

    1.3MB

  • Sample

    240429-rt4rnscg94

  • MD5

    fe3f3a7dff24b0006687a73135bf3d57

  • SHA1

    346f1fbe7bfb3e1e2d333adb7f4ae3cdbcc40350

  • SHA256

    9ea105c857343568d6542e8215da792b479d5ff42f298b2a70c5b454b4073ddc

  • SHA512

    39243210a469d89fe0c9d49fd3c2570ef1dd90bf6aaffcecd7bdb5880e4fc701795eb73f67371c421599dd306f61b4ac52e53d4c48293cefa45add89ddb6b037

  • SSDEEP

    12288:hvXk1coH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:5k132JOt934J7Z6bQaj1BvUm9J

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-29_fe3f3a7dff24b0006687a73135bf3d57_bkransomware_karagany

    • Size

      1.3MB

    • MD5

      fe3f3a7dff24b0006687a73135bf3d57

    • SHA1

      346f1fbe7bfb3e1e2d333adb7f4ae3cdbcc40350

    • SHA256

      9ea105c857343568d6542e8215da792b479d5ff42f298b2a70c5b454b4073ddc

    • SHA512

      39243210a469d89fe0c9d49fd3c2570ef1dd90bf6aaffcecd7bdb5880e4fc701795eb73f67371c421599dd306f61b4ac52e53d4c48293cefa45add89ddb6b037

    • SSDEEP

      12288:hvXk1coH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:5k132JOt934J7Z6bQaj1BvUm9J

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks