General

  • Target

    2024-05-17_fafadcdc6d4718b1cd26ed0e9e0fb347_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    fafadcdc6d4718b1cd26ed0e9e0fb347

  • SHA1

    1a079dbf201b33e44fe6c3b2133a84177ed812ee

  • SHA256

    96d735849cf4f5508a07eaeaea70ae696b929f4bb9af91011a7fc90eb4e854b3

  • SHA512

    c275d3ca9a7df0b7e6711ec0242cc6bdd8ad2b9c8c46a3c5ee95a3b406e30580be0e93c30207c4daacba4e40400b4e9b3051170649c3049e56ab0465474171fe

  • SSDEEP

    3072:l5K/B0toLeSNJDlZHQsozTS+SMqqDL2/TrK3dG:lcytwLx1yTS+xqqDL6HKg

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-17_fafadcdc6d4718b1cd26ed0e9e0fb347_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections