gandcrab | 2024-01-24_db34dff999f0ad97da7ffedcf7fbe30d_gandcrab_karagany

Sharing

Target

2024-01-24_db34dff999f0ad97da7ffedcf7fbe30d_gandcrab_karagany
Size

1.4MB
MD5

db34dff999f0ad97da7ffedcf7fbe30d
SHA1

fb2a441cf716cd0171bb5c57468664370fa017ad
SHA256

71a8dcf324e0df82192049c2fbed71e17fef2d61bee6fa04cc1cfdc647277010
SHA512

6c449124a0cd714edda1b463757b2d174987748cf313a976d712749d43d1a10419d81852a237762d31ab344ba61d55bede1f4b19b5d6559b2ac31ba9d6f7541b
SSDEEP

6144:h/DtORruiMyqqDL6tvd/p9Hfa1WKXIOTzjELE:h/nqn6jh9y0XOTU

Score

10^/10

gandcrab

Detects Reflective DLL injection artifacts 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_ReflectiveLoader

Detects ransomware indicator 1 IoCs

resource	yara_rule
sample	SUSP_RANSOMWARE_Indicator_Jul20

GandCrab payload 1 IoCs

resource	yara_rule
sample	family_gandcrab

Gandcrab Payload 1 IoCs

resource	yara_rule
sample	Gandcrab

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-24_db34dff999f0ad97da7ffedcf7fbe30d_gandcrab_karagany