General

  • Target

    2024-04-06_d35ecdc4b686de8b28fc02086b7ceab1_gandcrab_karagany

  • Size

    155KB

  • MD5

    d35ecdc4b686de8b28fc02086b7ceab1

  • SHA1

    e6e17b9d8a25834d828452f4cbf4a36644176e3d

  • SHA256

    453c4bdab15cbecba1a4184ac0217c20b802f097919b94c6bb35729c1f3bf471

  • SHA512

    fa28dd77fb7d1f46e4dca01f89d0f6df1fe53578729e9b5f053d4ef32448bdca95177591ae5fab167a485e20c8ad872e2ffde60b5a0dfbc05a52d2265fddcf42

  • SSDEEP

    3072:l5K/B0toLHjSNJolZHQsozTS+SMqqDL2/TrKgvG:lcytwO01yTS+xqqDL6HKl

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_d35ecdc4b686de8b28fc02086b7ceab1_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections