2024-07-06_90727caa58d20a1ab87b22e697842dae_bkransomware_karagany

General

Target
2024-07-06_90727caa58d20a1ab87b22e697842dae_bkransomware_karagany
Size 677KB
Sample240706-rxvm6stcld
SHA256 fab3acebe7d20b6086c7305f297ac2dbe846b1917699ac9c3cc45c03dcafa336
MD5 90727caa58d20a1ab87b22e697842dae
SHA1 eaab5775d75f50b58e07f55460848e9dbf05b99c
SHA512 8299526c6752a43adfc19aff20008e2430c02735c4ee2cb9d2151ed17e0703bdd6c1092ac73480364e297f428b1841f45f9621c0837733feea39dea18583d2bb
SSDEEP 12288:rvXk1yWCIkeRlk7ugd1EOFcNW2f+zRIxzA0RJ4P3Zu/t4ZJ0FSlg6BdLET7bI/IE:Lk1yWHRlMugdD+JsRgZRJ4fM430Eg6nj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-06_90727caa58d20a1ab87b22e697842dae_bkransomware_karagany

File Explorer

2024-07-06_90727caa58d20a1ab87b22e697842dae_bkransomware_karagany

.exe 677KB

2024-07-06_90727caa58d20a1ab87b22e697842dae_bkransomware_karagany

IMPHASH 6475c67b13bd524a574fee91f1de7cd5
SHA256 fab3acebe7d20b6086c7305f297ac2dbe846b1917699ac9c3cc45c03dcafa336
MD5 90727caa58d20a1ab87b22e697842dae
SHA1 eaab5775d75f50b58e07f55460848e9dbf05b99c
SHA512 8299526c6752a43adfc19aff20008e2430c02735c4ee2cb9d2151ed17e0703bdd6c1092ac73480364e297f428b1841f45f9621c0837733feea39dea18583d2bb
SSDEEP 12288:rvXk1yWCIkeRlk7ugd1EOFcNW2f+zRIxzA0RJ4P3Zu/t4ZJ0FSlg6BdLET7bI/IE:Lk1yWHRlMugdD+JsRgZRJ4fM430Eg6nj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8555

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryA CreateFileMappingA MapViewOfFile GetLastError CloseHandle MultiByteToWideChar WideCharToMultiByte ExpandEnvironmentStringsA GetProcAddress LoadLibraryA WriteConsoleW GetModuleFileNameA SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers HeapSize HeapReAlloc OutputDebugStringW RtlUnwind LoadLibraryExW GetShortPathNameA GetFullPathNameA SetFilePointerEx GetCommandLineW LCMapStringW IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW EncodePointer DecodePointer HeapAlloc IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetStringTypeW RaiseException ExitProcess GetModuleHandleExW GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW EnterCriticalSection LeaveCriticalSection CreateFileW

user32

SetForegroundWindow ShowWindow IsIconic DefWindowProcA PostQuitMessage IsWindow CreateWindowExA RegisterClassExA LoadCursorA LoadIconA DispatchMessageA TranslateMessage GetMessageA GetDesktopWindow SetTimer

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA

shell32

CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

2024-07-06_90727caa58d20a1ab87b22e697842dae_bkransomware_karagany

kernel32

user32

advapi32

shell32

generic