2024-06-08_5d6b2c46c806c133b975749e7d316301_karagany_mafia

General

Target
2024-06-08_5d6b2c46c806c133b975749e7d316301_karagany_mafia
Size 265KB
Sample240608-d7atvshd54
SHA256 50f16266415aed475dfbe42bfcfacac449bfee5ed5c2e318b3c8cdc0dfc04fe8
MD5 5d6b2c46c806c133b975749e7d316301
SHA1 5a69a26ae0b1dfa6423a4f5331cf22b02ea077e5
SHA512 3a05c85d7a7a9b43a8bf137d7bfc4c8d0d6ee06bd55cdf55e69e9d6368a5f8746ccf6c0dffbb2ead5183bcb6a69785b1382bfdb277ce6598c34853fc0491d3a8
SSDEEP 3072:hv5tt9cXgoEJk/N77w1ixVJgLzhUkNp2fAhz1WLNoXE1e3GcCFK/ksMRRpwzvjDo:hvSgnk/NgSJqzhUU2fa1WKXIOTzjELEG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-08_5d6b2c46c806c133b975749e7d316301_karagany_mafia

File Explorer

2024-06-08_5d6b2c46c806c133b975749e7d316301_karagany_mafia

.exe 265KB

2024-06-08_5d6b2c46c806c133b975749e7d316301_karagany_mafia

IMPHASH 8789b700fb185b521d8c4230c8ca90ce
SHA256 50f16266415aed475dfbe42bfcfacac449bfee5ed5c2e318b3c8cdc0dfc04fe8
MD5 5d6b2c46c806c133b975749e7d316301
SHA1 5a69a26ae0b1dfa6423a4f5331cf22b02ea077e5
SHA512 3a05c85d7a7a9b43a8bf137d7bfc4c8d0d6ee06bd55cdf55e69e9d6368a5f8746ccf6c0dffbb2ead5183bcb6a69785b1382bfdb277ce6598c34853fc0491d3a8
SSDEEP 3072:hv5tt9cXgoEJk/N77w1ixVJgLzhUkNp2fAhz1WLNoXE1e3GcCFK/ksMRRpwzvjDo:hvSgnk/NgSJqzhUU2fa1WKXIOTzjELEG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

41520

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW FindActCtxSectionStringW SetVolumeMountPointA GetProcAddress LoadLibraryW GetQueuedCompletionStatus GlobalDeleteAtom GetCPInfoExA lstrlenA WriteConsoleW ReadFile GetProcessHeap SetEndOfFile InterlockedIncrement InterlockedDecrement WideCharToMultiByte Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer MultiByteToWideChar RtlUnwind RaiseException GetLastError HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW HeapAlloc LCMapStringW GetCPInfo InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoW GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc CloseHandle CreateFileA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle CreateFileW

user32

GetPropW

ole32

CoGetCurrentProcess

Sharing

General

Malware Config

Signatures

File Explorer

2024-06-08_5d6b2c46c806c133b975749e7d316301_karagany_mafia

kernel32

user32

ole32

generic