General

  • Target

    2024-05-27_8e7f470aa33d8e0d2129b8410ca8c570_bkransomware_karagany

  • Size

    677KB

  • Sample

    240527-s6kd8shc4w

  • MD5

    8e7f470aa33d8e0d2129b8410ca8c570

  • SHA1

    9cc080b5300575b93fa3c52263190fc3b48641f4

  • SHA256

    a1d3f7c778e1510ddacf9a79ac509ff290dc37cb5c54ef5a4ea32fdc8ba2b940

  • SHA512

    dad8ec347a1018dde99a77f38514af518ddbc5e9d682d0e5267f205aa8a1722d1622b18c4c45fd13797cc32e389e30af19cab2341a738426da694d698e12698f

  • SSDEEP

    12288:IvXk1yLD7bHVKMQ4O4vSjNsyMLpRNO2FLzTGT/SRel8lkEoiqAj:sk1yX7bHsMQ4/O6yMLprOInyT/Swl8Mg

Score
7/10

Malware Config

Targets

    • Target

      2024-05-27_8e7f470aa33d8e0d2129b8410ca8c570_bkransomware_karagany

    • Size

      677KB

    • MD5

      8e7f470aa33d8e0d2129b8410ca8c570

    • SHA1

      9cc080b5300575b93fa3c52263190fc3b48641f4

    • SHA256

      a1d3f7c778e1510ddacf9a79ac509ff290dc37cb5c54ef5a4ea32fdc8ba2b940

    • SHA512

      dad8ec347a1018dde99a77f38514af518ddbc5e9d682d0e5267f205aa8a1722d1622b18c4c45fd13797cc32e389e30af19cab2341a738426da694d698e12698f

    • SSDEEP

      12288:IvXk1yLD7bHVKMQ4O4vSjNsyMLpRNO2FLzTGT/SRel8lkEoiqAj:sk1yX7bHsMQ4/O6yMLprOInyT/Swl8Mg

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks