General

  • Target

    2024-02-01_1d5f0ef89138d230c4c4ab91663f8bcb_gandcrab_karagany

  • Size

    143KB

  • MD5

    1d5f0ef89138d230c4c4ab91663f8bcb

  • SHA1

    237568bce3facf3fd6a971f6cebf00d37469a146

  • SHA256

    2371f34d302d7193633fa301c3cb3b59feaddee27f70853ff382c6640066e6ed

  • SHA512

    32f156bddb7d5d024cb1d24a9644484cf346fa313c43e497de39a2530d576c2d3744e94948f5b9755dabbe13a20f6084534ad755d182f96b7e2e53db56f4144d

  • SSDEEP

    3072:o+HcL2ICfmTntqSQRruiMZMqqDL2/Awvdj7Vjp9:heDtORruiMyqqDL6tvdpp9

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-01_1d5f0ef89138d230c4c4ab91663f8bcb_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections