General

  • Target

    2024-05-24_61585c7c6c21400604130572cc0d9136_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    61585c7c6c21400604130572cc0d9136

  • SHA1

    563960b9ce49672ce9b0f668f54462a6eac07f94

  • SHA256

    2d1621db36f52db8419f3ad84c0d485b4bcb0b12e3c3982dcf5b6ba38585cbfa

  • SHA512

    870e4ad58a152f69f95e18c211f0252566b516e2906bdf1966bb181dcbd2ee653a7ec5f97692ebae48f6b4d399c025836e9d249fb9e55e1b7e00aefaaa0e584b

  • SSDEEP

    3072:l5K/B0toLOSNJQlZHQsozTS+SMqqDL2/TrK4YG:lcytwbE1yTS+xqqDL6HKu

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_61585c7c6c21400604130572cc0d9136_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections