General

  • Target

    2024-04-06_068bec1e3cde91c55dc8c1200796e080_gandcrab_karagany

  • Size

    155KB

  • MD5

    068bec1e3cde91c55dc8c1200796e080

  • SHA1

    291b258fdf0fabe274f302a864bc686f339fd936

  • SHA256

    ea8145806bae8bb6c99cf06e1cc2abb68b67ab671b1b22830c90490bd13c15d1

  • SHA512

    b6fc2751b635c5937d8fb82ddc872408eb078d6f1a88e50b37869c5e96a0183270beaaab61ac5275310467ef4a15f60741373e05aae79812f1e461da55c47ea7

  • SSDEEP

    3072:l5K/B0toLQSNJPlZHQsozTS+SMqqDL2/TrKPzG:lcytwt91yTS+xqqDL6HKy

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_068bec1e3cde91c55dc8c1200796e080_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections