General

  • Target

    2024-05-23_4c5c4879342709f7d5f395491cba99f4_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    4c5c4879342709f7d5f395491cba99f4

  • SHA1

    93a0bba1bae21e977a368b50263990e2f883880b

  • SHA256

    29f5163f985b0f4cf052ee131045ca3f1ba23469f151619cf3dc9f25ba9fb4f4

  • SHA512

    ce2c60a92aade11df187a5e6c66732fa74929c99f4f45c571bf9e70db33c95a7d7d3a5bdc57dba0746b6a543f8f70adb43fe63f44c331db3a9600ace798b9a29

  • SSDEEP

    3072:HBb+U8i9qQHL7JPgUZIqMqqDL2/sVvdANdV:HBb/P9PgUZI5qqDL6ovdAN

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_4c5c4879342709f7d5f395491cba99f4_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections