General

  • Target

    2024-01-23_5ee5351a8e1fe467fb8660fb639e69c0_gandcrab_karagany

  • Size

    272KB

  • MD5

    5ee5351a8e1fe467fb8660fb639e69c0

  • SHA1

    610c12f9c9003e0478240a9fcb2830f913f51a8f

  • SHA256

    3e897a641f243c0ec1ebae189d9fbd5d653c36d1cae4d47b697e3ff89b576d99

  • SHA512

    1b020624231649430ab98004d6fdcd470825e5668ba50b6bcb815da3d22a586878a9c5f033055d2daed238cf048932c3e6e05a832337d2044ad3fd94f7fd435f

  • SSDEEP

    6144:lcytwbT1yTS+xqqDL6HKUgIpxIp8mDtfPBRwasxX:CyiT1Rqn6qUgIpxIhDt

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-23_5ee5351a8e1fe467fb8660fb639e69c0_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections