General

  • Target

    2024-04-11_d624bc1143985c06337d323aa4496410_gandcrab_karagany

  • Size

    164KB

  • MD5

    d624bc1143985c06337d323aa4496410

  • SHA1

    4bca6dcda9355e031fe0dae8ee3a7387569b2cce

  • SHA256

    933c507affb6fbeab8ada3d8a003d55f5854c5e5ea2c998bf0a5102b34cb9339

  • SHA512

    4301d6508e5cd307267fb27e410e54f07ad38e750f63c5cb17f722e1055b7d17171e8d8f1781e3bf116cac55393890747e0fdeb631abbe2066abbab9b329b237

  • SSDEEP

    3072:y5K/B0toLqSN2alZHQsozTS+SMqqDL2/TrKaQGQ97+:ycytwPN1yTS+xqqDL6HKIb

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-11_d624bc1143985c06337d323aa4496410_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    34df746bab7e3e7b6c7e59bab26059d1


    Headers

    Imports

    Sections