General

  • Target

    2024-05-24_a87bde9dcddd4b870f5d2c00c58e66b4_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    a87bde9dcddd4b870f5d2c00c58e66b4

  • SHA1

    8f0bc5770a07dbe33e5d134b66ea7baa169afba2

  • SHA256

    5de0b26576e12b8ae9b3f8286e27549c171046f9c86ff45f1e07629222e76801

  • SHA512

    6262ad452ed904531b99761c9c0c9daa9cec0ad5977c73fa9a857cf378e0058aad53edc3a73f2d002a5a94bb4b125953b7eae5590f8d2c01ade2e6922f2fb175

  • SSDEEP

    3072:m5tmM+miqQH5Us4QL1nMqqDL2/OPvdl5:m5t3cj4QL1MqqDL6svdl5

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_a87bde9dcddd4b870f5d2c00c58e66b4_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections