General

  • Target

    2024-01-23_31b8104ac6142cc303396f6a09d6a8b4_gandcrab_karagany

  • Size

    244KB

  • MD5

    31b8104ac6142cc303396f6a09d6a8b4

  • SHA1

    3dac5505124910ea6e4fe29cadcb28ce1394ded8

  • SHA256

    5147cd80cdeab8df07215ee2552f3f465fb6f36bb13e8a3f7773b02fd4f0de16

  • SHA512

    ff1444a0d5bea5ccff542de7b8d947e7331f7b4021fceac0aeb5657bf7817f5f976f74b0ae875b3bd6c1a66fb6baacc62b305b20d9dd23d8cffa84e361202794

  • SSDEEP

    3072:l5K/B0toLOSNJ8lZHQsozTS+SMqqDL2/TrKx2Gh/YrDAEioKhAv:lcytwbg1yTS+xqqDL6HKJhEKs

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-23_31b8104ac6142cc303396f6a09d6a8b4_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections