Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-08-10_2288bdebd6e91cf4a25de01994832957_bkransomware_karagany

  • Size

    1.5MB

  • Sample

    240810-bjt7gssere

  • MD5

    2288bdebd6e91cf4a25de01994832957

  • SHA1

    7d7e12683e6ccb2a1f9ab93bfefb41e3391f92aa

  • SHA256

    995f68e7b26ce7992364f242fb52e2387043240615200481b1ab0a5e105014f9

  • SHA512

    c743f9db8d514f44559c0df6dda6fffb1ae077525c43efdd2f79a3026c04977ee9bdfddc4a5c0bfb918267494bf98cbeb3cbb72ee123f85f2af3c0a0b3bdbda7

  • SSDEEP

    24576:Qk1s8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:Qk1sgDUYmvFur31yAipQCtXxc0H

Malware Config

Targets

    • Target

      2024-08-10_2288bdebd6e91cf4a25de01994832957_bkransomware_karagany

    • Size

      1.5MB

    • MD5

      2288bdebd6e91cf4a25de01994832957

    • SHA1

      7d7e12683e6ccb2a1f9ab93bfefb41e3391f92aa

    • SHA256

      995f68e7b26ce7992364f242fb52e2387043240615200481b1ab0a5e105014f9

    • SHA512

      c743f9db8d514f44559c0df6dda6fffb1ae077525c43efdd2f79a3026c04977ee9bdfddc4a5c0bfb918267494bf98cbeb3cbb72ee123f85f2af3c0a0b3bdbda7

    • SSDEEP

      24576:Qk1s8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:Qk1sgDUYmvFur31yAipQCtXxc0H

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks