General
-
Target
2024-06-01_71684d47edbab1a125408d7f4ab723b0_bkransomware_karagany_wapomi
-
Size
98KB
-
Sample
240601-v1zcbahg2s
-
MD5
71684d47edbab1a125408d7f4ab723b0
-
SHA1
9c571218720cee2df6b9ff5990fb0c7671cfbcf9
-
SHA256
abb59e765722504a8267f9ef0fd3a9b73bc0c8bf29f8f8e504180f1a8b22e622
-
SHA512
5548b300bf36be0cf25322dfbbe9a6ebaacfaa3c9317157883821506ba1539962be61ce6157a584ddd606146201191cc166339eb337af093bf4ab6301b3c079c
-
SSDEEP
1536:xlbzRLkKWDmJJifu5IksCt5IKygvQPcCsWjcdSXcl0GCq2iW7z:xxFqyRmksCRykQ4SDGCH
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_71684d47edbab1a125408d7f4ab723b0_bkransomware_karagany_wapomi.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-01_71684d47edbab1a125408d7f4ab723b0_bkransomware_karagany_wapomi.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-01_71684d47edbab1a125408d7f4ab723b0_bkransomware_karagany_wapomi
-
Size
98KB
-
MD5
71684d47edbab1a125408d7f4ab723b0
-
SHA1
9c571218720cee2df6b9ff5990fb0c7671cfbcf9
-
SHA256
abb59e765722504a8267f9ef0fd3a9b73bc0c8bf29f8f8e504180f1a8b22e622
-
SHA512
5548b300bf36be0cf25322dfbbe9a6ebaacfaa3c9317157883821506ba1539962be61ce6157a584ddd606146201191cc166339eb337af093bf4ab6301b3c079c
-
SSDEEP
1536:xlbzRLkKWDmJJifu5IksCt5IKygvQPcCsWjcdSXcl0GCq2iW7z:xxFqyRmksCRykQ4SDGCH
Score9/10-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-