General

  • Target

    2024-05-16_09b14f6fdf22e12a04ed53ca84bf65f5_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    09b14f6fdf22e12a04ed53ca84bf65f5

  • SHA1

    200f145e86a0815d3762b02143199a6afe55313a

  • SHA256

    34474f3509aa55d75ed12ec2d70fb433ac08af3c9a32a7b4c0d2581eea78b8cc

  • SHA512

    8531559736279be1cfd3fd0b4e9ae1ec7aed76b2dd582de1aa29bc70b85c5f2c933a7dc41c9f6b8ad47e79cd8d5805544fcc56ccf03fc1d09c245b4b38538e89

  • SSDEEP

    3072:l5K/B0toLmSNJ3lZHQsozTS+SMqqDL2/TrKxjG:lcytwz91yTS+xqqDL6HK8

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-16_09b14f6fdf22e12a04ed53ca84bf65f5_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections