General

  • Target

    2024-05-16_62d2525e36440f3f11bbc5e74c36cb93_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    62d2525e36440f3f11bbc5e74c36cb93

  • SHA1

    29d044a36ffa0dfecf519bc87519596f40cc6c55

  • SHA256

    93116040a86343576dba211aed8f87e66320f2c980ca3c0888698499a2a6227d

  • SHA512

    c2d3550079e84a6a0ad6862631df5c4582e7e1256d85e113aca3358b9e4014a472f3cec1b7b49644d590f4b1ea925e4ee42a351829f0e2ee99075e27324dad77

  • SSDEEP

    3072:S5K/B0toLgSNJslxwsx89TSdBgjMqqDL2/TOK+UG:ScytwdnTTSdBgQqqDL6SKI

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-16_62d2525e36440f3f11bbc5e74c36cb93_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections