e9611a9405138db1225c0cdfbf704e32b45577b11795e0456aeb55bb8aed30e7 | Triage

Sharing

General

Target

2024-07-04_63dbc497e9dd91328e8a33bf90e7faaf_bkransomware_karagany
Size

677KB
Sample

240704-b5yf2axgmp
MD5

63dbc497e9dd91328e8a33bf90e7faaf
SHA1

0d1a4929b9f38742cd9da96fe683a5f7745de69a
SHA256

e9611a9405138db1225c0cdfbf704e32b45577b11795e0456aeb55bb8aed30e7
SHA512

4b061324861e9ce38ff4df40e341192f8a5f228d8c81f928ea6fe14983c31ad421c303fe066639395b8ddeed850511ebb52aa15edfb697dd4a0ccc710fa41afc
SSDEEP

12288:zvXk10UMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8B:jk10atr0zAiX90z/F0jsFB3SQkC

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  2024-07-04_63dbc497e9dd91328e8a33bf90e7faaf_bkransomware_karagany
- Size
  
  677KB
- MD5
  
  63dbc497e9dd91328e8a33bf90e7faaf
- SHA1
  
  0d1a4929b9f38742cd9da96fe683a5f7745de69a
- SHA256
  
  e9611a9405138db1225c0cdfbf704e32b45577b11795e0456aeb55bb8aed30e7
- SHA512
  
  4b061324861e9ce38ff4df40e341192f8a5f228d8c81f928ea6fe14983c31ad421c303fe066639395b8ddeed850511ebb52aa15edfb697dd4a0ccc710fa41afc
- SSDEEP
  
  12288:zvXk10UMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8B:jk10atr0zAiX90z/F0jsFB3SQkC
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2