General

  • Target

    2024-05-24_84b13235ee478698c2f05c67ca5599f1_bkransomware_gandcrab_karagany

  • Size

    142KB

  • MD5

    84b13235ee478698c2f05c67ca5599f1

  • SHA1

    d020a68e68644cf1bc6e32be1368336292cbd9d3

  • SHA256

    7f80717aa5e8d011e20402f13fb4af7a1a57a18d64fcbd66bc765880f393cca0

  • SHA512

    2a6599cffabb7d45f376d204277dbac5b59162010669ea3b2bc41c88b480b8073e051ba7d83af651aedddbb1b0216cc0e8a8555aebb546d9f953f8587bc08584

  • SSDEEP

    3072:O9ABQSbzqQVxQn00b9WruiMwMqqDL2/ALvdjP:O9iQGA0C9WruiM7qqDL6avdjP

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_84b13235ee478698c2f05c67ca5599f1_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    6cbf594d5b903044e58ddf542ea9a7e8


    Headers

    Imports

    Sections