General

  • Target

    2024-04-06_d6988c7d51dc115ff0c407fa05179e67_gandcrab_karagany

  • Size

    155KB

  • MD5

    d6988c7d51dc115ff0c407fa05179e67

  • SHA1

    6282eb9ff16c5c06d7e0570bcf2aca24764f956d

  • SHA256

    4d4d1c4935f7a9963e05dec0d1bbcea091322f0ea6a476f404a875dedcc2ddf5

  • SHA512

    37b52fde23894229e1b092073047f2da088c5a43d85a5ffdad91dd6abdfb51eb2f47cf19c93734e1b95ab909834967ba2806e0b1f7647e560856a2b9a32837f9

  • SSDEEP

    3072:l5K/B0toLQSNJnTlZHQsozTS+SMqqDL2/TrKStG:lcytwt91yTS+xqqDL6HK1

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_d6988c7d51dc115ff0c407fa05179e67_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections