General

  • Target

    2024-01-25_ed7cb9b2ab61bbbc5036cb71f99cad0f_gandcrab_karagany

  • Size

    244KB

  • MD5

    ed7cb9b2ab61bbbc5036cb71f99cad0f

  • SHA1

    b34f72e2d93042791868949fc3083d54af4ca9f3

  • SHA256

    d975045ba4f9a1c98e3ce4df2571ded75b6a5841191878883f7bbabc67c442a0

  • SHA512

    17cc7fa533c457caea3649fc4fac60be7b9e33c40983a9b2fc5dd15c9d5149e688e59b1df66e9788654f3745b0cf88a580eaee561744b8369fe440735dd61377

  • SSDEEP

    3072:l5K/B0toLOSNJKlZHQsozTS+SMqqDL2/TrKEaGh/YrDAEioKhAv:lcytwbS1yTS+xqqDL6HKQhEKs

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-25_ed7cb9b2ab61bbbc5036cb71f99cad0f_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections