General

  • Target

    2024-05-15_37ee9079d4cf8f9977dea9ea445ea53c_bkransomware_gandcrab_karagany

  • Size

    143KB

  • MD5

    37ee9079d4cf8f9977dea9ea445ea53c

  • SHA1

    165026ef808e4c92a4ba0bd8b8d9c83ea8528b4a

  • SHA256

    3dfa27de06032ec5f2877d6680821b8567b28f83ed26f21a32598648348ffa39

  • SHA512

    a04e9a7d883b1c2135bc7d78e016e69a30f3f8e2a089ec7ceb1cea3104f07b44bd8b381617440ebdf0400ef03c0ca69b126f3345150b08365661e76e7e2cf38c

  • SSDEEP

    3072:o+HcL2ICfCTntqSQRruiMZMqqDL2/AwvdP7Vjp9:hqDtORruiMyqqDL6tvdFp9

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-15_37ee9079d4cf8f9977dea9ea445ea53c_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections