General

  • Target

    2024-05-13_f350de44d46848340b0da93a3095adfe_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    f350de44d46848340b0da93a3095adfe

  • SHA1

    8f361afb82407722049f5dde3bc67d8127bf2c9d

  • SHA256

    eedd1330e9a3e1f0cd489001b0d99556ab2ea22cab72115d4fc8a1b486332ff6

  • SHA512

    c197983a7caba06a5d5d83b50949adbff622f0e908059e31c8a5cc3f69b2d12c21b3f9eb7824d7b2a5f93fec437aed763fda2c491c225302a2c7207a7479d576

  • SSDEEP

    3072:zBb+U8i9qQHl7FYb6+KIyMqqDL2/sEvddNd8:zBb/hRYb6+KIRqqDL6Zvdd0

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-13_f350de44d46848340b0da93a3095adfe_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections