General

  • Target

    2024-02-01_f088244c210687666fb73663a4980140_gandcrab_karagany

  • Size

    155KB

  • MD5

    f088244c210687666fb73663a4980140

  • SHA1

    d0c6201385834f8ec8bbacde69a87d270c1db043

  • SHA256

    4b1978e9480144b89e12deb596c39805a61078e31fefd628529b4dc87cb85a5d

  • SHA512

    ddb375f91754427a60b77ac0e8152bd1f997c59abd79266dac823074ecd16697343b0ca16cff3f6f039df741eecaedc78c23a17c6c14c181afc588d67ecd547c

  • SSDEEP

    3072:l5K/B0toLPSNJNlZHQsozTS+SMqqDL2/TrKw0G:lcytwSP1yTS+xqqDL6HKS

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-01_f088244c210687666fb73663a4980140_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections