General

  • Target

    2024-03-14_dc00bc6188f0e6ab4ead6510514af350_gandcrab_karagany

  • Size

    147KB

  • MD5

    dc00bc6188f0e6ab4ead6510514af350

  • SHA1

    a989168ea641cec6f7cbcb75240b8c4b005856ca

  • SHA256

    469a2d3e95bcefeacde3c871b7cbad3e32388579518617bb46e5e3b669376f64

  • SHA512

    85031bdefe24495642c4001d22ee05c82ab1f32aa38a9f2be0fc73a1fc9362121092ec8d9d6340613b19b3c3bb3b756c1d54138ecad52f6199a1c4d6e65132a9

  • SSDEEP

    3072:W+DcL2TCfLTntqSQRruiMZMqqDL2/AwvdF7Vjp9V:7oDtORruiMyqqDL6tvdHp9V

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-14_dc00bc6188f0e6ab4ead6510514af350_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections