General

  • Target

    2024-02-02_f9ab902f60a6eca735d35bce29c4fe18_gandcrab_karagany

  • Size

    155KB

  • MD5

    f9ab902f60a6eca735d35bce29c4fe18

  • SHA1

    f3a5c2f71d121221491b58033c39a6b11ee449f3

  • SHA256

    bf2b5cb111d45c606f05a5a1490b5058fcfe4f0ab782e516a6c5ced055b47b15

  • SHA512

    f2837ea465a3cca1801f5177eaed18e895912cd3ea9c01eab6274d6b0ca26c3a29c2a5851ff242005939489f5121fc7cfab1502ca34ff885f8ce7ad0b8f7c7ea

  • SSDEEP

    3072:S5K/B0toLeSNJzlxwsx89TSdBgjMqqDL2/TOKkBG:ScytwLaTTSdBgQqqDL6SKb

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-02_f9ab902f60a6eca735d35bce29c4fe18_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections