General

  • Target

    2024-07-25_fd858289d1a0e561078d9be3c043db7d_bkransomware_karagany

  • Size

    1.3MB

  • Sample

    240725-nn4b6szapa

  • MD5

    fd858289d1a0e561078d9be3c043db7d

  • SHA1

    014d766bf2868684fdbddb246333d2f20852fa36

  • SHA256

    009e248b15932433306bcd9cccf23e55683e7505e0e249f1a615e7c958631cb2

  • SHA512

    c85770ecba63bcf8b6d032aeeba61d45c349683ef4bc76da3a583dac31c93e7bbd197b477009e957c3ae95276fa53aaa2ba1423e81b120db3b97be2817b3ff04

  • SSDEEP

    12288:TvXk1GUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik85:Dk1Gatr0zAiX90z/F0jsFB3SQkA

Malware Config

Targets

    • Target

      2024-07-25_fd858289d1a0e561078d9be3c043db7d_bkransomware_karagany

    • Size

      1.3MB

    • MD5

      fd858289d1a0e561078d9be3c043db7d

    • SHA1

      014d766bf2868684fdbddb246333d2f20852fa36

    • SHA256

      009e248b15932433306bcd9cccf23e55683e7505e0e249f1a615e7c958631cb2

    • SHA512

      c85770ecba63bcf8b6d032aeeba61d45c349683ef4bc76da3a583dac31c93e7bbd197b477009e957c3ae95276fa53aaa2ba1423e81b120db3b97be2817b3ff04

    • SSDEEP

      12288:TvXk1GUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik85:Dk1Gatr0zAiX90z/F0jsFB3SQkA

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks