Overview

overview

7

Static

static

3

2024-05-29...ny.exe

windows7-x64

7

2024-05-29...ny.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-29_7d0df2db310812e28a5975657714af2d_bkransomware_karagany

  • Size

    677KB

  • Sample

    240529-v2t4zscg34

  • MD5

    7d0df2db310812e28a5975657714af2d

  • SHA1

    7a04b3b8bf8e39a1dc4ba7b60259f4d9a2cb90d0

  • SHA256

    d491f6cc29fbadcf5d9f289e9a380eb4c258228848ede99fab43c3462ad62dce

  • SHA512

    16bb4fdedeb7986a59a6203d7058eff4fe63598dfc3c8e7f32abb542582c39ffd2fd118e84bec7a856250c708c7ef94c8dcb7be9c443b0f803f117c49beca06d

  • SSDEEP

    12288:KvXk1/FCrNDFKYmKIiirRGW2phzrvXuayM1J3AAlrAf0d83QC0OXxcpGHMki:Gk1/8NDFKYmKOF0zr31JwAlcR3QC0OXn

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-29_7d0df2db310812e28a5975657714af2d_bkransomware_karagany

    • Size

      677KB

    • MD5

      7d0df2db310812e28a5975657714af2d

    • SHA1

      7a04b3b8bf8e39a1dc4ba7b60259f4d9a2cb90d0

    • SHA256

      d491f6cc29fbadcf5d9f289e9a380eb4c258228848ede99fab43c3462ad62dce

    • SHA512

      16bb4fdedeb7986a59a6203d7058eff4fe63598dfc3c8e7f32abb542582c39ffd2fd118e84bec7a856250c708c7ef94c8dcb7be9c443b0f803f117c49beca06d

    • SSDEEP

      12288:KvXk1/FCrNDFKYmKIiirRGW2phzrvXuayM1J3AAlrAf0d83QC0OXxcpGHMki:Gk1/8NDFKYmKOF0zr31JwAlcR3QC0OXn

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks