General

  • Target

    2024-05-24_16c85b0b77a78b6476cd46af0acaa526_bkransomware_karagany

  • Size

    677KB

  • Sample

    240524-r4p19shh53

  • MD5

    16c85b0b77a78b6476cd46af0acaa526

  • SHA1

    cf4e8a442176a1c2d46dd370ff6fab2fc4ce4c31

  • SHA256

    4600b70c51899b49dfe48afbbbdaef371849974266075d0cdf7a8fb7c52fb2a7

  • SHA512

    091a87bf87e73ba56a01c3d5e2fa0b9e1540791773c83e323345700a4c1faef2519c042f77604cba3c074b9b85770f89b789b68371b13f5102c9c78110581bc5

  • SSDEEP

    12288:gvXk1BU5VFWwHiC4mxYr8PCAwQy3KVMsMWsYNv+0kHe/6eZ0hW4:0k17wH/BYcCAwQEKesf/NmLeiTd

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_16c85b0b77a78b6476cd46af0acaa526_bkransomware_karagany

    • Size

      677KB

    • MD5

      16c85b0b77a78b6476cd46af0acaa526

    • SHA1

      cf4e8a442176a1c2d46dd370ff6fab2fc4ce4c31

    • SHA256

      4600b70c51899b49dfe48afbbbdaef371849974266075d0cdf7a8fb7c52fb2a7

    • SHA512

      091a87bf87e73ba56a01c3d5e2fa0b9e1540791773c83e323345700a4c1faef2519c042f77604cba3c074b9b85770f89b789b68371b13f5102c9c78110581bc5

    • SSDEEP

      12288:gvXk1BU5VFWwHiC4mxYr8PCAwQy3KVMsMWsYNv+0kHe/6eZ0hW4:0k17wH/BYcCAwQEKesf/NmLeiTd

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks