General

  • Target

    2024-04-06_c6a05fe01b2d4cee33c57bc7304941eb_gandcrab_karagany

  • Size

    155KB

  • MD5

    c6a05fe01b2d4cee33c57bc7304941eb

  • SHA1

    4b57aac1383229f4e0c4ddb056e1e1ae7e29111d

  • SHA256

    1dd4ff61c83b8d172cb1233bb30bed775c7935594bfc6c2864f3351d5d496a4d

  • SHA512

    ff37847dbd11c23ca05bf58e97cacdb2e68a683e0e8a4e7be6b467c5df2dd15d90a0189035ec7835c3ba3cdaa39da298ef48d62df88f4a6785513390b59e6260

  • SSDEEP

    3072:l5K/B0toLiSNJflZHQsozTS+SMqqDL2/TrKdbG:lcytwnF1yTS+xqqDL6HKw

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_c6a05fe01b2d4cee33c57bc7304941eb_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections