Overview

overview

10

Static

static

10

2024-04-09...ny.exe

windows7-x64

3

2024-04-09...ny.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-09_1b5038d8e71b965fb8adee56be051fcd_gandcrab_karagany

  • Size

    143KB

  • MD5

    1b5038d8e71b965fb8adee56be051fcd

  • SHA1

    0b1d88997b75cb9bff3391bef38261986e2b1fb9

  • SHA256

    bbb1e6ac68a91835e0b43555fbd623e1c25a2c3b549664cbcf218152deb52836

  • SHA512

    dc8eff4c3ee8e66ca65b01441ac172e5843d1e8e25be5f29d7d45b28b908c449f59af03b2c0e7d9101b1739a3ae62c1e8326c02adfd124774bb726830ffd2957

  • SSDEEP

    3072:o+HcL2ICfdTntqSQRruiMZMqqDL2/AwvdC7Vjp9:hVDtORruiMyqqDL6tvdIp9

Score
10/10
gandcrab

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-09_1b5038d8e71b965fb8adee56be051fcd_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections