General

  • Target

    2024-05-24_72130f96ed390cb28c686a54b85872ac_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    72130f96ed390cb28c686a54b85872ac

  • SHA1

    6aad60c13b0b749d9c4c46049e06ffe2d3799d72

  • SHA256

    1a7e899de8435277eed4a0bb5b34fc2b2ba2b74f747b76ce1bc518430e286277

  • SHA512

    9f4e46d55ed5342515cf7a40b63be4769fddd4451bcf86f5f9cb355b3325ed465fda5bc3d1e001fdc75659ba13787938ffc6aa8c420575bd1a11b47f3e725dec

  • SSDEEP

    3072:m5tmM+mBqQHpUs4QL1nMqqDL2/OPvdlz:m5t3bj4QL1MqqDL6svdlz

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_72130f96ed390cb28c686a54b85872ac_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections