d93898a3cce085926b9791787b546cbc53073b83bb00d8fbd5576ed279aa3d64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-27_8ebcac1935e5461c407a7690b97c3fcc_bkransomware_karagany
Size

1.3MB
Sample

240627-mvpxpazdmn
MD5

8ebcac1935e5461c407a7690b97c3fcc
SHA1

fd8d8b542a7fe4b7f2472982b376beec331728fd
SHA256

d93898a3cce085926b9791787b546cbc53073b83bb00d8fbd5576ed279aa3d64
SHA512

f01fa0f4c23fe1a984cfcc77ea97f9fcd3c606b5b4c6db79bfb46ac4d5979e34102e05fff56c17bc297f5ff962e510aab30cfaa390643245cfe72ec236103725
SSDEEP

12288:MvXk1wMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:ok1ZSkQ/7Gb8NLEbeZ

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-06-27_8ebcac1935e5461c407a7690b97c3fcc_bkransomware_karagany
- Size
  
  1.3MB
- MD5
  
  8ebcac1935e5461c407a7690b97c3fcc
- SHA1
  
  fd8d8b542a7fe4b7f2472982b376beec331728fd
- SHA256
  
  d93898a3cce085926b9791787b546cbc53073b83bb00d8fbd5576ed279aa3d64
- SHA512
  
  f01fa0f4c23fe1a984cfcc77ea97f9fcd3c606b5b4c6db79bfb46ac4d5979e34102e05fff56c17bc297f5ff962e510aab30cfaa390643245cfe72ec236103725
- SSDEEP
  
  12288:MvXk1wMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:ok1ZSkQ/7Gb8NLEbeZ
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2