General

  • Target

    2024-05-24_3da2d4531ccc186e38d7902413b2b07d_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    3da2d4531ccc186e38d7902413b2b07d

  • SHA1

    3dfacef99b663460b570f1bdbf88cbf32f8c8340

  • SHA256

    2b625f4bc5283099c55d822f2b8d93c8e63f97d8886716316e37605b78e30cda

  • SHA512

    a1f17e7852de14fb3750ffe284b52774bc6a4b42a241c4e83a8658caa811cf1f3f62e4fd51b9c0d49626dd44a32b562bcccc67cf66af4cbbdae84795d3024ad7

  • SSDEEP

    3072:kBb+U8i9qQHWRGvv01U5wgMqqDL2/sUvdniv:kBb/CwH01U5wLqqDL61vdQ

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_3da2d4531ccc186e38d7902413b2b07d_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections