gandcrab | 2024-01-25_11bfcd92e436a794ba78641401bb754f_gandcrab_karagany

General

Target

2024-01-25_11bfcd92e436a794ba78641401bb754f_gandcrab_karagany
Size

1.4MB
MD5

11bfcd92e436a794ba78641401bb754f
SHA1

f9450770e1f48e4f373d4d633b976054ffc239d4
SHA256

527424ddd6edc19424e3560bc63d6192490b890cbb1e22db0b9a7ffcdb412748
SHA512

9e9f3d343fe99aae970ca486c49ec834a107a9f4a4ec37976b792bef9ae555fe2be0e3706a37f8c3db9bee928aa4641138e1aab6cb0f52edbf6b132c6c92fceb
SSDEEP

6144:hjDtORruiMyqqDL6tvdUp9rqElBzToKjWgED4:hjnqn6jI9r1zTHWg

Score

10^/10

gandcrab

Detects Reflective DLL injection artifacts 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_ReflectiveLoader

Detects ransomware indicator 1 IoCs

Processes:

resource	yara_rule
sample	SUSP_RANSOMWARE_Indicator_Jul20

GandCrab payload 1 IoCs

Processes:

resource yara_rule

sample family_gandcrab
Gandcrab Payload 1 IoCs

Processes:

resource yara_rule

sample Gandcrab
Gandcrab family
gandcrab

resource	yara_rule
sample	family_gandcrab

resource	yara_rule
sample	Gandcrab

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_11bfcd92e436a794ba78641401bb754f_gandcrab_karagany