General

  • Target

    2024-05-12_e4df3d930a77fcc632425f24972aa20f_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    e4df3d930a77fcc632425f24972aa20f

  • SHA1

    b0fe6a8469d0141cbe9d226f88eddde9e0f560b1

  • SHA256

    c28421c65b0ae95119032aac45c788731c13e268e4a9611cc7f3fab52baa9766

  • SHA512

    3de0dfa0be574f4d1ae8a8bb1897de61d75b2eac53654231773f35785109ca5ece009b5189c6aba2d5a73a97ffc27dc146512c8c392291fc588027dd9575dcc8

  • SSDEEP

    3072:S5K/B0toLQSNJAlxwsx89TSdBgjMqqDL2/TOKaAG:ScytwtLTTSdBgQqqDL6SKs

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_e4df3d930a77fcc632425f24972aa20f_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections