Overview

overview

10

Static

static

10

2024-05-17...ny.exe

windows7-x64

3

2024-05-17...ny.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-17_d91fc257a3cc076d2a77f79262553405_bkransomware_gandcrab_karagany

  • Size

    143KB

  • MD5

    d91fc257a3cc076d2a77f79262553405

  • SHA1

    945f1307a245026674b88052e267488fb19948f1

  • SHA256

    6d14aa3d2afefbe23023a7fd974d5ef6ff564bbf81ec3140722dd589472fcf8c

  • SHA512

    aa9f1cea402efb2aea3da0c89fe9595c8733f4cecbf5be7a90eefcb11c7962d572806ed3d7463039500b1f9f7ac8e569137bc88212a56e5b276e7b8fbfc4bd67

  • SSDEEP

    3072:o+HcL21CfiTntqSQRruiMZMqqDL2/Awvdm7Vjp9:hjDtORruiMyqqDL6tvdMp9

Score
10/10
gandcrab

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-17_d91fc257a3cc076d2a77f79262553405_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections