Overview

overview

10

Static

static

10

2024-05-15...ny.exe

windows7-x64

3

2024-05-15...ny.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-15_19c11d7110578ad48f657535f3d5e158_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    19c11d7110578ad48f657535f3d5e158

  • SHA1

    13ae12827384b04bc5539ca509bf0f1456261853

  • SHA256

    c3178c61f2f73f991451543e6ae7a6741506d4fad26227cfc0279a59ef6ec51a

  • SHA512

    7e193b7c7ea44a50201e1bce52c9df17fc8cea0a9f28788de943c11d2da9b5dca5f8ecfa73406a987c1f4c3f03ab3e4a175b0a3f6096ca5285bc51f485d2dc41

  • SSDEEP

    3072:l5K/B0toLQSNJXlZHQsozTS+SMqqDL2/TrK/sG:lcytwtt1yTS+xqqDL6HKh

Score
10/10
gandcrab

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-15_19c11d7110578ad48f657535f3d5e158_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections