General

  • Target

    2024-05-17_37eea754d763ebe891862d1ce88f4775_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    37eea754d763ebe891862d1ce88f4775

  • SHA1

    ed24ae601c6cd33108ac9cc8a7823086743e4a46

  • SHA256

    73736a66208c0dee80cbaa693ee4f1b0ec81b2e57f217d206b44ba4d3655b920

  • SHA512

    a94f74039fa0b3ebefeda36a61a4b87ece7a7930e2b2852c7656da32f685c1b12571f6e24560aa8dc8a02d3c3fdb29ee82c7571f7da8da9ab4e617e220cab3bc

  • SSDEEP

    3072:S5K/B0toLVSNJGlxwsx89TSdBgjMqqDL2/TOKwKG:ScytwIxTTSdBgQqqDL6SKA

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-17_37eea754d763ebe891862d1ce88f4775_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections