General

  • Target

    2024-05-24_00c242ec14e1d6cffeb80927d637017f_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    00c242ec14e1d6cffeb80927d637017f

  • SHA1

    c8573b60c5aec2a1637632afb9a7c69a5e1cad7b

  • SHA256

    9224d2871f29e474cbd9d959295b954c56628968d04f4f2f62704e9ce0e3729f

  • SHA512

    64def9bfd4e94483e1d1504b419d2b113fc80ed706a24876e7985d063c681cbbfdabd894556c2e316ac41403f61da85d5d2a94ab2779e1946c12befeefc1fcbe

  • SSDEEP

    3072:l5K/B0toLQSNJ4lZHQsozTS+SMqqDL2/TrKk8G:lcytwtY1yTS+xqqDL6HKS

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_00c242ec14e1d6cffeb80927d637017f_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections