General

  • Target

    2024-01-23_62a7bb4fd324965745bee551e1120503_gandcrab_karagany

  • Size

    272KB

  • MD5

    62a7bb4fd324965745bee551e1120503

  • SHA1

    d8f82172c087326c71f1b84b5bc7a3d1ea58b35e

  • SHA256

    657c02c233573c76a4d3e62b75d7ebaeac13ee32135f7a749b698953a403d8e5

  • SHA512

    2010fad3d075b930bc9c27465179f57e00f98e828d916d3f28f3e9f1b9ed820e8ed2f91694f8a61eb29142ccca1a9fb7e031c0dd663f204850a16f7540c54454

  • SSDEEP

    3072:l5K/B0toLOSNJQlZHQsozTS+SMqqDL2/TrKRvGrBuj00nReaXkuSQ7cdOd:lcytwbQ1yTS+xqqDL6HKUrUDOI

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-23_62a7bb4fd324965745bee551e1120503_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections