General

  • Target

    2024-05-12_91266bfe7845f8ded984a6ecd1f106cf_bkransomware_gandcrab_karagany

  • Size

    142KB

  • MD5

    91266bfe7845f8ded984a6ecd1f106cf

  • SHA1

    15b04c5987136a3773ca0e1316ec4fa2d473c7ed

  • SHA256

    3b6d7436583e4843d2ae61b23566ea32ef039c357e645764e4a181b65e9fd9c8

  • SHA512

    e9e174c260f9cad701c0d1201e984957724a87232482423a83486118ae6b709f7f3ae8d53dd1103bd9974f820d1137aea7d9ffb28ef6136eb5ce38d2646e9f7e

  • SSDEEP

    3072:O9ABQSbkqQV0Qn00b9WruiMwMqqDL2/ALvdjT:O9iQgA0C9WruiM7qqDL6avdjT

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_91266bfe7845f8ded984a6ecd1f106cf_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    6cbf594d5b903044e58ddf542ea9a7e8


    Headers

    Imports

    Sections