General

  • Target

    2024-05-23_16c95fc82264469b6db9c49c7b5f8c03_bkransomware_gandcrab_karagany

  • Size

    143KB

  • MD5

    16c95fc82264469b6db9c49c7b5f8c03

  • SHA1

    ee4d192cbdabc1178cb516fd91683a92b745a710

  • SHA256

    454aad5abac35a516a36a7135ba2a40ceab2d26e700c60f91ca29da4987e6149

  • SHA512

    300c85d82a486d66168e43940b9891cebd2a10d567ed7d09efab74fc7c28c5b6e7c0c4f00b6468c1f22441554e08a1d961df58fe84df0c08ce32853b49cc9664

  • SSDEEP

    3072:o+HcL2ICfdTntqSQRruiMZMqqDL2/Awvdr7Vjp9:hFDtORruiMyqqDL6tvdRp9

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_16c95fc82264469b6db9c49c7b5f8c03_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections