General

  • Target

    2024-01-23_5b497347c31e6310c1b2d6b9a960170d_gandcrab_karagany

  • Size

    244KB

  • MD5

    5b497347c31e6310c1b2d6b9a960170d

  • SHA1

    4d37e1ef3a144fa9105560a43b095d08454121fb

  • SHA256

    fe3f25b0ed4529ab43b06b3ee05d6d9aa670baf10484b0e2442e5d1fea5aaf21

  • SHA512

    e407314320c0915fecc26625e2b3bcff8a5b14ddd2b90542f0ab2c01f3b23aae81c883dc58f5165d3e82f731d6255eaf11b06498d8f07023a303265a23a7b592

  • SSDEEP

    3072:l5K/B0toLOSNJzlZHQsozTS+SMqqDL2/TrK1lGh/YrDAEioKhAv:lcytwbJ1yTS+xqqDL6HKyhEKs

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-23_5b497347c31e6310c1b2d6b9a960170d_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections