Overview

overview

7

Static

static

1

2024-10-13...ny.exe

windows7-x64

7

2024-10-13...ny.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-13_3af0401cc8a4bca80045796f5d858c39_bkransomware_karagany

  • Size

    10.9MB

  • Sample

    241013-vfcyks1gpl

  • MD5

    3af0401cc8a4bca80045796f5d858c39

  • SHA1

    1c12c063cae8dc930190dfc4c744f6a3d098ad6c

  • SHA256

    11ca173a74a19ac2f34471358aac2c79959d16a42ae924205ba6ed7f1186e1f5

  • SHA512

    cc3f7bcc2030a03577035339b6d4c98208bfcb69c685e358d618cb7402722bc08238faec7a8073eb8a9ac204753b64501189466013c7e33efa6a9efd445a06bf

  • SSDEEP

    196608:VLbYQVG2JOguavkNqkTf9ABa/MXvd4wdbOj93pL2hDcsqjZ72Oz+Arm5g1xFPld0:9bYlQRb8HW4w4lgosWZ6OEyVW

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      2024-10-13_3af0401cc8a4bca80045796f5d858c39_bkransomware_karagany

    • Size

      10.9MB

    • MD5

      3af0401cc8a4bca80045796f5d858c39

    • SHA1

      1c12c063cae8dc930190dfc4c744f6a3d098ad6c

    • SHA256

      11ca173a74a19ac2f34471358aac2c79959d16a42ae924205ba6ed7f1186e1f5

    • SHA512

      cc3f7bcc2030a03577035339b6d4c98208bfcb69c685e358d618cb7402722bc08238faec7a8073eb8a9ac204753b64501189466013c7e33efa6a9efd445a06bf

    • SSDEEP

      196608:VLbYQVG2JOguavkNqkTf9ABa/MXvd4wdbOj93pL2hDcsqjZ72Oz+Arm5g1xFPld0:9bYlQRb8HW4w4lgosWZ6OEyVW

    Score
    7/10
    bootkitdiscoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks