General

  • Target

    2024-09-05_becccd096cfddabd2a91d1d80de82fc2_bkransomware_karagany_wapomi

  • Size

    90KB

  • Sample

    240905-jdhkhavhpk

  • MD5

    becccd096cfddabd2a91d1d80de82fc2

  • SHA1

    883acb708d7483132d3df02b8913b1a4538e8114

  • SHA256

    8d4caec80e8c152354ef9922511bb1558c58d10db756f46fea2e075136e44c54

  • SHA512

    e5273ac85f97d8a89740a76e18f90d089675895360ce8dda4f41d791590c4dcae247bacd440305a0ca47f114bf585c45ae2a2acd2226529819966fb5c4a27ed6

  • SSDEEP

    1536:KJgIzEO/p3BjXV1bG5r4rW7r4tc+L19sWjcdx8KaJ8GCq2iW7z:ov1/G5+L1C6eGCH

Malware Config

Targets

    • Target

      2024-09-05_becccd096cfddabd2a91d1d80de82fc2_bkransomware_karagany_wapomi

    • Size

      90KB

    • MD5

      becccd096cfddabd2a91d1d80de82fc2

    • SHA1

      883acb708d7483132d3df02b8913b1a4538e8114

    • SHA256

      8d4caec80e8c152354ef9922511bb1558c58d10db756f46fea2e075136e44c54

    • SHA512

      e5273ac85f97d8a89740a76e18f90d089675895360ce8dda4f41d791590c4dcae247bacd440305a0ca47f114bf585c45ae2a2acd2226529819966fb5c4a27ed6

    • SSDEEP

      1536:KJgIzEO/p3BjXV1bG5r4rW7r4tc+L19sWjcdx8KaJ8GCq2iW7z:ov1/G5+L1C6eGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks