gandcrab | 2024-01-25_31e20a199088b9e06ce0eb723efc8bd4_gandcrab_karagany

General

Target

2024-01-25_31e20a199088b9e06ce0eb723efc8bd4_gandcrab_karagany
Size

14.8MB
MD5

31e20a199088b9e06ce0eb723efc8bd4
SHA1

81eb89282775eec1ce85921b122d2e38e92d153f
SHA256

9c1329510eefafe6ea472296dce62eee4f4ae54d6c527f5b6c03921dbc010759
SHA512

aa5146bf68e82f446cbc36a1bce910f134b4213de5f497f8959ce5699a0a135e412a92115a52f9f814eab3fa7862e9c676bc3c1d9779416602f9d3ec20339060
SSDEEP

6144:lcytwb+1yTS+xqqDL6HKLERpuuwnGD/Nj:Cyi+1Rqn6qLGpuuq

Score

10^/10

gandcrab

Detects Reflective DLL injection artifacts 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_ReflectiveLoader

GandCrab payload 1 IoCs

Processes:

resource yara_rule

sample family_gandcrab
Gandcrab Payload 1 IoCs

Processes:

resource yara_rule

sample Gandcrab
Gandcrab family
gandcrab

resource	yara_rule
sample	family_gandcrab

resource	yara_rule
sample	Gandcrab

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_31e20a199088b9e06ce0eb723efc8bd4_gandcrab_karagany