General

  • Target

    2024-05-23_bd6d5a701ff6ad305d0303a328f72d6e_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    bd6d5a701ff6ad305d0303a328f72d6e

  • SHA1

    e58b901b57ddcc435ddf556149220e708e6bf971

  • SHA256

    2b482243d251ea293a76064507f7a8538d010d776553c82454e33a2c8ff9b899

  • SHA512

    f4797c5a9a2b659a2d99e0701778fa06c3d21f3ad81c0eeaf52e4ccf8851874d2865ebc9689bda581f88046a7aad59d42308ca1982fb2cbc16cb6b12d9123dad

  • SSDEEP

    3072:l5K/B0toLQSNJTlZHQsozTS+SMqqDL2/TrKXoG:lcytwtR1yTS+xqqDL6HKt

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_bd6d5a701ff6ad305d0303a328f72d6e_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections