General

  • Target

    2024-05-17_b73bb92fd8e5e1336fa70194dfd3d2d4_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    b73bb92fd8e5e1336fa70194dfd3d2d4

  • SHA1

    278d99e031d6648aaf35982d299b5927ef258245

  • SHA256

    6fda721fbcc2df1505a2a215dfc8a02d05eb7e16666b8a7789602518f2ec3f15

  • SHA512

    e4e34b08f147cd2bc8c446ea176bd50383a0bf6185bedf1e671c5a942645f99c4ce92d028cdff7be2593b76bcebf1bd97820ee3013c744e6187a0fc3f3b5b4dd

  • SSDEEP

    3072:l5K/B0toLDSNJolZHQsozTS+SMqqDL2/TrKGOG:lcytwOM1yTS+xqqDL6HK6

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-17_b73bb92fd8e5e1336fa70194dfd3d2d4_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections