General

  • Target

    2024-05-23_0a5d6b9000348c6bc428ea01453c0259_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    0a5d6b9000348c6bc428ea01453c0259

  • SHA1

    b9ce8f0b3b6cb628afc487277bd053444a80fa3a

  • SHA256

    03f13b8ac6a535feee188ba482de02f9db87e139fb90969d89fc7c74918d90d0

  • SHA512

    cdf4839d7e23e9ec34573d55e15e937f406cffff862de1934fd6ec343db4f1e81bddd58720431d8750669e367dce571cbd8c82d6e13e1889d1c2e63885013bf3

  • SSDEEP

    3072:S5K/B0toLVSNJklxwsx89TSdBgjMqqDL2/TOKrCG:ScytwI/TTSdBgQqqDL6SKH

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_0a5d6b9000348c6bc428ea01453c0259_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections