gandcrab | 2024-01-24_de32ec07413a2af6c0be9bf2b0c3e4d9_gandcrab_karagany

Sharing

Target

2024-01-24_de32ec07413a2af6c0be9bf2b0c3e4d9_gandcrab_karagany
Size

380KB
MD5

de32ec07413a2af6c0be9bf2b0c3e4d9
SHA1

4605cd2592debfe15bc053cce5595b4c689add44
SHA256

9da502d4b71e5333e9f37af09a9ad4a0d100c26caf87946de3674698b797afda
SHA512

b965271bde5c6c4e321ffdeb492079cb6dd98825c4c3835ea99aeaa5065b41e452be2cc810f24aaf54fadaf7c1302ba4723af99e7c8dd4d2b352e9b66ec7a258
SSDEEP

6144:lcytwbF1yTS+xqqDL6HKIbwIV/QHxOtJkkgYsGGdzKL:CyiF1Rqn6qIR4Hsi+L

Score

10^/10

gandcrab

Detects Reflective DLL injection artifacts 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_ReflectiveLoader

Detects ransomware indicator 1 IoCs

resource	yara_rule
sample	SUSP_RANSOMWARE_Indicator_Jul20

GandCrab payload 1 IoCs

resource	yara_rule
sample	family_gandcrab

Gandcrab Payload 1 IoCs

resource	yara_rule
sample	Gandcrab

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-24_de32ec07413a2af6c0be9bf2b0c3e4d9_gandcrab_karagany