General

  • Target

    2024-04-06_91917f4b5226c6a96a26be7ceea83c3f_gandcrab_karagany

  • Size

    143KB

  • MD5

    91917f4b5226c6a96a26be7ceea83c3f

  • SHA1

    1fb21780b731d9654f21e4bc14673fcd83661bfc

  • SHA256

    1cab08ca582778f7251ed01f593bef1797eb637afdaf8519887584c512521a2e

  • SHA512

    e0d842bab4305474c4dc8c10a15bf808f4c1da6bd0484defa8931aed278fba2391c46a810cb3440e7e1cc2dd66114e3cf10ad6f148ae05ad2b6b0bc8f626a49e

  • SSDEEP

    3072:o+HcL2E1CfaTntqSQRruiMZMqqDL2/AwvdZ7Vjp9:hMTDtORruiMyqqDL6tvdrp9

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_91917f4b5226c6a96a26be7ceea83c3f_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections