Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
22-05-2024 21:33
General
-
Target
2024-05-22_4224f9a4e51d3e0204367f633bcd9e5a_bkransomware_karagany.exe
-
Size
1.3MB
-
MD5
4224f9a4e51d3e0204367f633bcd9e5a
-
SHA1
e1d0451071c0bb402cfa87517a26a0d2d30e3e00
-
SHA256
f5e8b240fb98506fed7ce93ad325ec5d49819d6dbdced3e2f76b984002165fd5
-
SHA512
13d5f1a416ac095d81b519cbfa6470a5228f215695d5034c72e276b4a468509607e6a0327cc0122093d5140e0a738e34c543e2f91367a7df80acfece01a80d2e
-
SSDEEP
12288:7vXk1b+Xq1gYgR+8DAoczI2ZfnwlQTePINayz+ByIne7xmmZjIUTSl+0/1:7k10MdIuwe3zfIe7xmvH/
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-22_4224f9a4e51d3e0204367f633bcd9e5a_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-22_4224f9a4e51d3e0204367f633bcd9e5a_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.9MB
-
Filesize
1.9MB