General

  • Target

    2024-05-16_34df7bb69603b73518da9491063e052f_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    34df7bb69603b73518da9491063e052f

  • SHA1

    fd47bfe7c01f0fa700b8bae920e3a493db41cfc2

  • SHA256

    500e9f297158fb8ad7f223732c37733e660f6ee5dc77166bbf4d4d69af4d204f

  • SHA512

    6d8962c3f5cd62ef623388f7303627118cba313842845ac63d8aba3feeda086274cecfb9bac0c4d5a7be76a5cbeeb2ea23b019cf5c3852a23088d49519c4c9c5

  • SSDEEP

    3072:S5K/B0toL8SNJUlxwsx89TSdBgjMqqDL2/TOKPSG:ScytwhrTTSdBgQqqDL6SKz

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-16_34df7bb69603b73518da9491063e052f_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections