General

  • Target

    2024-05-12_0e3595d7a998103567a6a8734b043ca6_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    0e3595d7a998103567a6a8734b043ca6

  • SHA1

    b506ceadcb99166b94bb90cc2a082ee9d06a574d

  • SHA256

    db6d7ed1a2dfbc97c90ee408c42927114ca63ccbc9ec7572846691fa6af73b04

  • SHA512

    25783f155bee467d2e8cdd80e30a577068b4bc4be3f59d5afeca7122a09649a29f7cb78493aae2aa9eecf0005dba9978ac1de8cd72c127e64be7735fd4c99a5e

  • SSDEEP

    3072:l5K/B0toLQSNJTlZHQsozTS+SMqqDL2/TrKJUG:lcytwtp1yTS+xqqDL6HK7

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_0e3595d7a998103567a6a8734b043ca6_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections