gandcrab | 2024-01-24_2ddd5909d992d60e87dac432e7626f40_gandcrab_karagany

Sharing

Target

2024-01-24_2ddd5909d992d60e87dac432e7626f40_gandcrab_karagany
Size

1.4MB
MD5

2ddd5909d992d60e87dac432e7626f40
SHA1

2eaca84657ee0b2530e2da29abee336186fd85f4
SHA256

b9b95a76b3ed1623a301515d0d367754de592b343d13616e057a6239a2cadcdc
SHA512

fea2357537d4b11699df8a8fd48059f052c46a3eb5dfc7ad6aa1b400748108f703fa4ec919264ca45cb2ae27043733f5745235701e269a52855d180b91fe1a9b
SSDEEP

6144:hiDtORruiMyqqDL6tvdUp9ffa1WKXIOTzjELE:hinqn6jI9q0XOTU

Score

10^/10

gandcrab

Detects Reflective DLL injection artifacts 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_ReflectiveLoader

Detects ransomware indicator 1 IoCs

resource	yara_rule
sample	SUSP_RANSOMWARE_Indicator_Jul20

GandCrab payload 1 IoCs

resource	yara_rule
sample	family_gandcrab

Gandcrab Payload 1 IoCs

resource	yara_rule
sample	Gandcrab

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-24_2ddd5909d992d60e87dac432e7626f40_gandcrab_karagany