General

  • Target

    2024-05-16_b4b9a7f3c1a8795d265cbc95acec78d0_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    b4b9a7f3c1a8795d265cbc95acec78d0

  • SHA1

    bc11cd7fed588a03483f8eb8f1aad74c2866df3c

  • SHA256

    1e8fada885b20a5bd87eecb0e39c9f79fb07615fdd2647ff42d779b5fe2dd399

  • SHA512

    7dc30774e37d5663e4e555a9f35227845e1d1abdd16b4f975d2f7e17d120bf260e9cab40ea811fea99be933cdf27ee4832153b6d7756b1d5ca64acf3eb2ac591

  • SSDEEP

    3072:l5K/B0toLySNJ6lZHQsozTS+SMqqDL2/TrKWWG:lcytwXe1yTS+xqqDL6HK+

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-16_b4b9a7f3c1a8795d265cbc95acec78d0_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections