General

  • Target

    2024-02-01_6a1ed12d52f8f8da54f23fde951f6d5c_gandcrab_karagany

  • Size

    155KB

  • MD5

    6a1ed12d52f8f8da54f23fde951f6d5c

  • SHA1

    8206a51c593059404d204c1ac6561cb067aa3439

  • SHA256

    5aeb1caf2f5acd112cd34d25fe14cad7b0453a0b61d6c9d6a8a37fd2ef72ef18

  • SHA512

    0ac6d095dba063b4b49cfada65a5695ab7ab3bd512aa0d85f569362a4ea3b5e2347e9a775d754760c076408ddbd8abf05ad4bdebc0517f1645011d0ce0b2b4df

  • SSDEEP

    3072:S5K/B0toLXSNJvlxwsx89TSdBgjMqqDL2/TOKlsG:Scytw66TTSdBgQqqDL6SKr

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-01_6a1ed12d52f8f8da54f23fde951f6d5c_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections