General

  • Target

    2024-05-17_4b2d1ef45f1f90a53a3c0490d6872593_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    4b2d1ef45f1f90a53a3c0490d6872593

  • SHA1

    bc8b88322c1ae8359ffb745910bd3c97d552a727

  • SHA256

    2e6900968709e90dd542866fdc7188d51dc0b660c5eecbb91d3dd121b8e74a7e

  • SHA512

    17bd34bd86298c591a975fe73a53dda55e22858fb69d7bbd2ed245c207ba56530fae9f38abdaa2f0b9abf78c0c248495c914de51d4f94d5fe87aa91f132f7e7e

  • SSDEEP

    3072:l5K/B0toLxSNJjlZHQsozTS+SMqqDL2/TrKneG:lcytwsR1yTS+xqqDL6HKf

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-17_4b2d1ef45f1f90a53a3c0490d6872593_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections