General

  • Target

    2024-02-01_af3ca6dcb3c4384c4c2814c91996a5b8_gandcrab_karagany

  • Size

    141KB

  • MD5

    af3ca6dcb3c4384c4c2814c91996a5b8

  • SHA1

    c6887def429d8ddc7ff7c51d7484eeb2d2b8920a

  • SHA256

    abc9cf2352a4c9cf3f981d22b704c0f2161bcc1c5341dfc80658cde57df3fd89

  • SHA512

    88ba852a7d5c6c9608812d245611464d245b6d4f1246d20b31f5666254b518413c285486b48ada7a433f542b13497fa0ece0fdb6e6552a8213d44208c0b6929a

  • SSDEEP

    3072:m5tmM+mBqQHrUs4QL1nMqqDL2/OPvdlo:m5t3Fj4QL1MqqDL6svdlo

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-01_af3ca6dcb3c4384c4c2814c91996a5b8_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections