General

  • Target

    2024-05-24_cb87de1b577da9b2611cf81b6f80bb5e_bkransomware_karagany

  • Size

    677KB

  • Sample

    240524-rnrj6ahb89

  • MD5

    cb87de1b577da9b2611cf81b6f80bb5e

  • SHA1

    a102cd4aa513d1cb045dff28087060fc1dbe4254

  • SHA256

    e2d357dc0684fdf09725104365e916822a7f45137eebbd4794411235499accb4

  • SHA512

    fdf8363a6c99af706b9b3dae0b73c82888a86547a94caabb9e642d56f88c663433951d073177487efec97686a632fb1fff9c6486003296e1a60be870d4c72a23

  • SSDEEP

    12288:OvXk1NgeKznl5TXJR0j3p2pVUrrQuLoWTF23JVbd0UILzXSocmKdYNq6:yk1N7ozX0j52pMkuLoiSJVlIL29mhNq6

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_cb87de1b577da9b2611cf81b6f80bb5e_bkransomware_karagany

    • Size

      677KB

    • MD5

      cb87de1b577da9b2611cf81b6f80bb5e

    • SHA1

      a102cd4aa513d1cb045dff28087060fc1dbe4254

    • SHA256

      e2d357dc0684fdf09725104365e916822a7f45137eebbd4794411235499accb4

    • SHA512

      fdf8363a6c99af706b9b3dae0b73c82888a86547a94caabb9e642d56f88c663433951d073177487efec97686a632fb1fff9c6486003296e1a60be870d4c72a23

    • SSDEEP

      12288:OvXk1NgeKznl5TXJR0j3p2pVUrrQuLoWTF23JVbd0UILzXSocmKdYNq6:yk1N7ozX0j52pMkuLoiSJVlIL29mhNq6

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks