General

  • Target

    2024-05-15_871c685c6070f9820ed722a1e62e20b5_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    871c685c6070f9820ed722a1e62e20b5

  • SHA1

    058a090d8db878d9be34f84ee2fbb005ccc5ac05

  • SHA256

    fcc704b99d5c737ee23f86d30e0a56f733bee21dfcc5f80e12f14d8a64cbfe62

  • SHA512

    3ccda0fbaecde20388d238303c08e5aa1155509c35d07319a1769b135ee727f670dfa0edd092964fda7290aa88c0638bcefd7136010661118f13b2246e844915

  • SSDEEP

    3072:S5K/B0toLQSNJLlxwsx89TSdBgjMqqDL2/TOKKDG:ScytwteTTSdBgQqqDL6SKz

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-15_871c685c6070f9820ed722a1e62e20b5_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections