General

  • Target

    2024-05-16_063ee4e262290ddbac3a8013475e6693_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    063ee4e262290ddbac3a8013475e6693

  • SHA1

    334ce81b1bbfc24f16d3ae0cb2b36e7fdc3bd742

  • SHA256

    244207fa3cfaca7d4b3b3f3ceb6884b8f2f86bff35734f18ae2a8e602bd1aa4e

  • SHA512

    de97d8d80a7de75fe4709ddafc03eaf53208dd33617a82714be917464c14fa992d03168028c51cc336b8e338cd186886d470c89938ed57578e93fb42e95a2496

  • SSDEEP

    3072:S5K/B0toL8SNJglxwsx89TSdBgjMqqDL2/TOKX3G:ScytwhDTTSdBgQqqDL6SKG

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-16_063ee4e262290ddbac3a8013475e6693_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections