Overview

overview

7

Static

static

1

2024-10-09...ny.exe

windows7-x64

7

2024-10-09...ny.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-09_297adf8ec73d1db227132c2409876b1b_bkransomware_karagany

  • Size

    10.9MB

  • Sample

    241009-q776kszhma

  • MD5

    297adf8ec73d1db227132c2409876b1b

  • SHA1

    1a7bb7c5ba7f17d2db1d4e2acf64557dda8cb32c

  • SHA256

    5d68ea7454fbaab6ea3e9a4d716032b831b988daa08fd00fa740fd650729ed8c

  • SHA512

    ee1d60b33ff2e535c384f1051c25d9d77896c3e99688270e48c5c0fb017c2e40d983a2a0d8603171bc2afa65126314d3feeb41ae978db3448fce39fce9230c71

  • SSDEEP

    196608:XLbYQVG2JOguavkNqkTf9ABa/MXvd4wdbOj93pL2hDcsqjZ72Oz+Arm5g1xFPld0:7bYlQRb8HW4w4lgosWZ6OEyVW

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      2024-10-09_297adf8ec73d1db227132c2409876b1b_bkransomware_karagany

    • Size

      10.9MB

    • MD5

      297adf8ec73d1db227132c2409876b1b

    • SHA1

      1a7bb7c5ba7f17d2db1d4e2acf64557dda8cb32c

    • SHA256

      5d68ea7454fbaab6ea3e9a4d716032b831b988daa08fd00fa740fd650729ed8c

    • SHA512

      ee1d60b33ff2e535c384f1051c25d9d77896c3e99688270e48c5c0fb017c2e40d983a2a0d8603171bc2afa65126314d3feeb41ae978db3448fce39fce9230c71

    • SSDEEP

      196608:XLbYQVG2JOguavkNqkTf9ABa/MXvd4wdbOj93pL2hDcsqjZ72Oz+Arm5g1xFPld0:7bYlQRb8HW4w4lgosWZ6OEyVW

    Score
    7/10
    bootkitdiscoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks