General
-
Target
2024-09-05_becccd096cfddabd2a91d1d80de82fc2_bkransomware_karagany_wapomi
-
Size
90KB
-
Sample
240905-jdhkhavhpk
-
MD5
becccd096cfddabd2a91d1d80de82fc2
-
SHA1
883acb708d7483132d3df02b8913b1a4538e8114
-
SHA256
8d4caec80e8c152354ef9922511bb1558c58d10db756f46fea2e075136e44c54
-
SHA512
e5273ac85f97d8a89740a76e18f90d089675895360ce8dda4f41d791590c4dcae247bacd440305a0ca47f114bf585c45ae2a2acd2226529819966fb5c4a27ed6
-
SSDEEP
1536:KJgIzEO/p3BjXV1bG5r4rW7r4tc+L19sWjcdx8KaJ8GCq2iW7z:ov1/G5+L1C6eGCH
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-05_becccd096cfddabd2a91d1d80de82fc2_bkransomware_karagany_wapomi.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
2024-09-05_becccd096cfddabd2a91d1d80de82fc2_bkransomware_karagany_wapomi
-
Size
90KB
-
MD5
becccd096cfddabd2a91d1d80de82fc2
-
SHA1
883acb708d7483132d3df02b8913b1a4538e8114
-
SHA256
8d4caec80e8c152354ef9922511bb1558c58d10db756f46fea2e075136e44c54
-
SHA512
e5273ac85f97d8a89740a76e18f90d089675895360ce8dda4f41d791590c4dcae247bacd440305a0ca47f114bf585c45ae2a2acd2226529819966fb5c4a27ed6
-
SSDEEP
1536:KJgIzEO/p3BjXV1bG5r4rW7r4tc+L19sWjcdx8KaJ8GCq2iW7z:ov1/G5+L1C6eGCH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-