General

  • Target

    2024-05-15_c26c06c5eb60b6e3c9a38ae9dad617ac_bkransomware_gandcrab_karagany

  • Size

    143KB

  • MD5

    c26c06c5eb60b6e3c9a38ae9dad617ac

  • SHA1

    90f90fd564e029660f24862c7265f9008f56aea1

  • SHA256

    f8bd52720ddd17f7f3ffd54af8cfd2c52cb65dea560cc4c649c292c27d8a6680

  • SHA512

    f0178b3e54364e2aea6259619dbd2abd673fb9fd33cabe7abd8fa9b971c900f08539f7e6aa252cb2b74260b808b86aa5d498c665fe8e2260f38e01c9e63708d7

  • SSDEEP

    3072:o+HcL2VCf9TntqSQRruiMZMqqDL2/AwvdJ7Vjp9:hEDtORruiMyqqDL6tvd7p9

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-15_c26c06c5eb60b6e3c9a38ae9dad617ac_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections