General

  • Target

    2024-02-01_06642680b727328c9e4da95cbd771d17_gandcrab_karagany

  • Size

    141KB

  • MD5

    06642680b727328c9e4da95cbd771d17

  • SHA1

    aa4b6713bec74cf5c543cf31df37252bd70a96a1

  • SHA256

    70afb476014bcc59589bb6710966aaa1feaefd5c80a220f9123cf71b3b047c94

  • SHA512

    da50dafcc310153fcd9b85a8a4bc48f893d0e977f4ece6493d970eb9e1e7f9b500d9472ec1827fca77e856b8a4f3e3ecfff38e338cb4606101c5375afa51f691

  • SSDEEP

    3072:m5tmM+m2qQHMUs4QL1nMqqDL2/OPvdlU:m5t3Nj4QL1MqqDL6svdlU

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-01_06642680b727328c9e4da95cbd771d17_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections