Overview

overview

7

Static

static

3

2024-05-27...ny.exe

windows7-x64

7

2024-05-27...ny.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-27_2aa1f8ce724c3da23aacbdb1467267bf_bkransomware_karagany

  • Size

    677KB

  • Sample

    240527-xl2v1aeb4y

  • MD5

    2aa1f8ce724c3da23aacbdb1467267bf

  • SHA1

    d32819b8ca6429a046e945377ea01a3147e9e04f

  • SHA256

    cbb33f2f2cfa4b46588094540c4ded029efdbaf87f3777bc19c01359e8728705

  • SHA512

    db1ae467435cf1e4af9939a1a2e0b1690633828181719b74db45d4b3b9037e6148ce4deeeb29a7dac31acc4dc80b0ff28fa63f0b0e01384483e4455f2c7d69d6

  • SSDEEP

    12288:4vXk1i/bxXyGH7XR2CAwEQki1I7wwY8DMkw5V7iP3sOZ9jDH3kTKE/aoJut8o2kL:8k1iF3B7zPkcowwtdwKzDXkDNJ4D2k

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-27_2aa1f8ce724c3da23aacbdb1467267bf_bkransomware_karagany

    • Size

      677KB

    • MD5

      2aa1f8ce724c3da23aacbdb1467267bf

    • SHA1

      d32819b8ca6429a046e945377ea01a3147e9e04f

    • SHA256

      cbb33f2f2cfa4b46588094540c4ded029efdbaf87f3777bc19c01359e8728705

    • SHA512

      db1ae467435cf1e4af9939a1a2e0b1690633828181719b74db45d4b3b9037e6148ce4deeeb29a7dac31acc4dc80b0ff28fa63f0b0e01384483e4455f2c7d69d6

    • SSDEEP

      12288:4vXk1i/bxXyGH7XR2CAwEQki1I7wwY8DMkw5V7iP3sOZ9jDH3kTKE/aoJut8o2kL:8k1iF3B7zPkcowwtdwKzDXkDNJ4D2k

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks