General

  • Target

    2024-05-24_96bf0c6ebf781c7993d06770cbba4bde_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    96bf0c6ebf781c7993d06770cbba4bde

  • SHA1

    7691f74882d430c26c60dccb0a27b921fff5120c

  • SHA256

    a1058f333cced88afd5e9bbb4bb070f19dae49482466632e0abd8eed4a11a7e6

  • SHA512

    e797fb7d2053ffe60b9c9d34ade256b0b748ef6024d91ab2308348d4c65d642c5af5072221949ef6510ee29d99cba5b93d6166953ea7180d5d3938b9a42609cf

  • SSDEEP

    3072:m5tmM+mBqQHWUs4QL1nMqqDL2/OPvdls:m5t3gj4QL1MqqDL6svdls

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_96bf0c6ebf781c7993d06770cbba4bde_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections