General

  • Target

    2024-05-22_38d6ca2eeaff3038cca00fd0720dde0e_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    38d6ca2eeaff3038cca00fd0720dde0e

  • SHA1

    2a31f6ef39b556d6e13dc2b7192b7e4fe5ab6ed9

  • SHA256

    698157ab8af97c3b5be793246a97388063dbbda423e69d021f515c74f899f10a

  • SHA512

    818e13914fa71ac399ef62f411a5c139da109a5f409c23319c30eb65856d05f8120f6c7536006d94d6addedd40fb8f70c53dc8e50c11b47ee6d7fe1bccdc882c

  • SSDEEP

    3072:S5K/B0toLNSNJBlxwsx89TSdBgjMqqDL2/TOKI1G:ScytwgcTTSdBgQqqDL6SKj

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-22_38d6ca2eeaff3038cca00fd0720dde0e_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections