General

  • Target

    2024-05-23_5d1a4e04c630957c6e858a3213627c34_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    5d1a4e04c630957c6e858a3213627c34

  • SHA1

    f98bac3825bdbe6477a3de252ed59156022f48a3

  • SHA256

    bbfe6d882bd693bc4f3af34ec1e613fabe82d16c8b448c0be1e4f625521b35b4

  • SHA512

    5b4437360b40afcb6aaffc064638b6f8ba01b491aa2fb1a4e4242d28fa4c75e0a7bae1798410084a2726f31c308abedc56c4e84ec11bd3a9d31eab7833b234e0

  • SSDEEP

    3072:l5K/B0toLQSNJMlZHQsozTS+SMqqDL2/TrKvFG:lcytwtY1yTS+xqqDL6HKQ

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_5d1a4e04c630957c6e858a3213627c34_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections