General

  • Target

    2024-04-30_f6091790caec3b3225997d6be07aa16d_bkransomware_karagany_wapomi

  • Size

    100KB

  • Sample

    240430-eezsysbe95

  • MD5

    f6091790caec3b3225997d6be07aa16d

  • SHA1

    97726a02c7051ab68ff44e97dd061988e706a5e9

  • SHA256

    1fcad26d2165a0c8d289af8ee3246ee0253d583aa3e5e877e9ee16c9ff732312

  • SHA512

    4bbae8bcd64b03d26ecc4762e689daa2bd09530fab86008b31a2607f939e95b23d0c9c32f0cc551cab5d4381d14f763dadb8a40790ad7ae94dc5443b85ed529a

  • SSDEEP

    1536:62RJ8zIfEMBreBSoeKcTZV5MuzcekgksWjcdKa9PGCq2iW7z/:62RcQSlNACW3LKKGCHr

Score
9/10

Malware Config

Targets

    • Target

      2024-04-30_f6091790caec3b3225997d6be07aa16d_bkransomware_karagany_wapomi

    • Size

      100KB

    • MD5

      f6091790caec3b3225997d6be07aa16d

    • SHA1

      97726a02c7051ab68ff44e97dd061988e706a5e9

    • SHA256

      1fcad26d2165a0c8d289af8ee3246ee0253d583aa3e5e877e9ee16c9ff732312

    • SHA512

      4bbae8bcd64b03d26ecc4762e689daa2bd09530fab86008b31a2607f939e95b23d0c9c32f0cc551cab5d4381d14f763dadb8a40790ad7ae94dc5443b85ed529a

    • SSDEEP

      1536:62RJ8zIfEMBreBSoeKcTZV5MuzcekgksWjcdKa9PGCq2iW7z/:62RcQSlNACW3LKKGCHr

    Score
    9/10
    • Detects executables packed with ASPack

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks