Overview

overview

10

Static

static

10

2024-05-12...ny.exe

windows7-x64

3

2024-05-12...ny.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-12_c508d8c3c47ca199182863f9dd9c06fa_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    c508d8c3c47ca199182863f9dd9c06fa

  • SHA1

    f1c1f29e1a366977aaa062e238d4e99c082eb89c

  • SHA256

    8f946e3f4b0e985f3e8ccfbd1807d01dd67dcc5b06935280ca56eb142e82bc17

  • SHA512

    804899d24a31bc30ab5da0e40c699521873288ef0ca35342adc8b6bf22b3bf7cca8a06b7732414460994f8921b25aeeea4c4bd8eb7523ef4e15e549fd0213bb9

  • SSDEEP

    3072:l5K/B0toLQSNJilZHQsozTS+SMqqDL2/TrKrHG:lcytwti1yTS+xqqDL6HKC

Score
10/10
gandcrab

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_c508d8c3c47ca199182863f9dd9c06fa_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections