Overview

overview

10

Static

static

10

2024-05-17...ny.exe

windows7-x64

3

2024-05-17...ny.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-17_509381befec1e328e2c33206f172d900_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    509381befec1e328e2c33206f172d900

  • SHA1

    d0d391d07fb6c69ec198317cd5d94dca7dd7dcb2

  • SHA256

    2196f4e83d0e1359546a8ea7dc1118ae3f669a9ba780ce15bfe79f76d1fc0531

  • SHA512

    49f9d3bc064a21393eae6cc697f4dec85d4fd3bf2146a0e7d78169f5f38ee0c40a564bb3f35d73d7c5d809197db2cecae8f52c3a765488acde25c337265ff4c2

  • SSDEEP

    3072:S5K/B0toL7SNJflxwsx89TSdBgjMqqDL2/TOKqBG:ScytwmOTTSdBgQqqDL6SKl

Score
10/10
gandcrab

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-17_509381befec1e328e2c33206f172d900_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections