General

  • Target

    2024-05-12_ca7b9a8dbdd5d56e3e774bdb4f4022bb_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    ca7b9a8dbdd5d56e3e774bdb4f4022bb

  • SHA1

    497fa887d4cf4ac8a0f5da5a21151d67e7ad29d1

  • SHA256

    98c3ad979dde88ac0427341a393c85cd1d1b5d0eae0a184dc57ccaad3127795f

  • SHA512

    9d1e15de8d73f82fd80bb142fd0205bdc07c47846198ddc5b01f086b422dfd5075263a987b7667f3e67a37a5f4544597966ca089b3764d793bea7bcfb94d5d71

  • SSDEEP

    3072:l5K/B0toLQSNJylZHQsozTS+SMqqDL2/TrKDmG:lcytwt+1yTS+xqqDL6HKj

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_ca7b9a8dbdd5d56e3e774bdb4f4022bb_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections