General

  • Target

    2024-02-22_d69c0726418c56450f4271da9e3a523a_gandcrab_karagany

  • Size

    163KB

  • MD5

    d69c0726418c56450f4271da9e3a523a

  • SHA1

    6aec67f348162c3d18b0f48049ad4d887b4abf38

  • SHA256

    41e444fb315d841822f6fe72de4213fed81762fc1d748adf97befd72e08a0c54

  • SHA512

    921f9eedb528fda1ac2f632094ae26a8ae6a47027a71a9e76f076f42f877a01477cbae3e921a7891b58c66099e5194f9cb7f3e585be0b457678b20609690dde6

  • SSDEEP

    3072:L5K/B0toL6SNJelZHQ2ozTS+SMqqDL2/TrKd6GT:Lcytw/u7yTS+xqqDL6HKpT

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-22_d69c0726418c56450f4271da9e3a523a_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections