gandcrab | 2024-01-28_5b6286eb8c42ead2e1b7d67eebbc5613_gandcrab_karagany

Sharing

Target

2024-01-28_5b6286eb8c42ead2e1b7d67eebbc5613_gandcrab_karagany
Size

272KB
MD5

5b6286eb8c42ead2e1b7d67eebbc5613
SHA1

b7555aa52c6424522c93566b39c6cd547efb3184
SHA256

3d56909a7f59f6e62541550511b936e1758af4053629ac389d62038a4b1b5239
SHA512

94e44ed797a8c56b1bdf914b364bece52bf043a3a769e163866ab13f9396e7b0a6df8d98585b6a6fb1c2f2bb55ea832a94d59603e2ed06c6ad62847371833327
SSDEEP

3072:l5K/B0toLOSNJnlZHQsozTS+SMqqDL2/TrKBfGrBuj00nReaXkuSQ7cdOd:lcytwb11yTS+xqqDL6HKArUDOI

Score

10^/10

gandcrab

Detects Reflective DLL injection artifacts 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_ReflectiveLoader

Detects ransomware indicator 1 IoCs

resource	yara_rule
sample	SUSP_RANSOMWARE_Indicator_Jul20

GandCrab payload 1 IoCs

resource	yara_rule
sample	family_gandcrab

Gandcrab Payload 1 IoCs

resource	yara_rule
sample	Gandcrab

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-28_5b6286eb8c42ead2e1b7d67eebbc5613_gandcrab_karagany