General
-
Target
2024-04-30_f6091790caec3b3225997d6be07aa16d_bkransomware_karagany_wapomi
-
Size
100KB
-
Sample
240430-eezsysbe95
-
MD5
f6091790caec3b3225997d6be07aa16d
-
SHA1
97726a02c7051ab68ff44e97dd061988e706a5e9
-
SHA256
1fcad26d2165a0c8d289af8ee3246ee0253d583aa3e5e877e9ee16c9ff732312
-
SHA512
4bbae8bcd64b03d26ecc4762e689daa2bd09530fab86008b31a2607f939e95b23d0c9c32f0cc551cab5d4381d14f763dadb8a40790ad7ae94dc5443b85ed529a
-
SSDEEP
1536:62RJ8zIfEMBreBSoeKcTZV5MuzcekgksWjcdKa9PGCq2iW7z/:62RcQSlNACW3LKKGCHr
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-30_f6091790caec3b3225997d6be07aa16d_bkransomware_karagany_wapomi.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-30_f6091790caec3b3225997d6be07aa16d_bkransomware_karagany_wapomi.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-30_f6091790caec3b3225997d6be07aa16d_bkransomware_karagany_wapomi
-
Size
100KB
-
MD5
f6091790caec3b3225997d6be07aa16d
-
SHA1
97726a02c7051ab68ff44e97dd061988e706a5e9
-
SHA256
1fcad26d2165a0c8d289af8ee3246ee0253d583aa3e5e877e9ee16c9ff732312
-
SHA512
4bbae8bcd64b03d26ecc4762e689daa2bd09530fab86008b31a2607f939e95b23d0c9c32f0cc551cab5d4381d14f763dadb8a40790ad7ae94dc5443b85ed529a
-
SSDEEP
1536:62RJ8zIfEMBreBSoeKcTZV5MuzcekgksWjcdKa9PGCq2iW7z/:62RcQSlNACW3LKKGCHr
Score9/10-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-