General

  • Target

    2024-05-23_e84805a4b88f5a12b6f4fc96f2014893_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    e84805a4b88f5a12b6f4fc96f2014893

  • SHA1

    4ce0b6c7e115411a36a2b3d445037f944f2b0e17

  • SHA256

    81c4ebf92ad5611a8cb9adb7a35dd62ba63d19ac74e251edd72ffc1aa9878106

  • SHA512

    255a3ad49c18daf854030d61e805c35af09dd20076971763c921dc32870408df9d5646376dcd03301edeb4d0c72eebbcdb48facac4cb85236bd0b82aa793ef7b

  • SSDEEP

    3072:S5K/B0toL+SNJIlxwsx89TSdBgjMqqDL2/TOKimG:ScytwrrTTSdBgQqqDL6SKm

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_e84805a4b88f5a12b6f4fc96f2014893_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections