General

  • Target

    2024-05-12_2a480924f12ca0fa07d4998e0537fd22_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    2a480924f12ca0fa07d4998e0537fd22

  • SHA1

    db32491b83e51f54fafda11b355801cecc95ea36

  • SHA256

    12be81e7a5494a3a9de099da93e937f134f7dcc0cfde6295b0e6449d4655d922

  • SHA512

    7a049c0b345d2d98fc8fcb7b76dbe69978b98a012c9d8f276803213e4a5ed7ced20fdd09b1d8e802cb5fc011261e036a8e3037851aace7dcf2e9e265991de854

  • SSDEEP

    3072:l5K/B0toLQSNJClZHQsozTS+SMqqDL2/TrKaGG:lcytwtu1yTS+xqqDL6HKq

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_2a480924f12ca0fa07d4998e0537fd22_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections