General

  • Target

    2024-05-24_f9f049b55161d2144dda9338538dd118_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    f9f049b55161d2144dda9338538dd118

  • SHA1

    2e023d29df3d1872622614be6f46e677c5fae4f1

  • SHA256

    420f08aa7ec0513dd4a67bda25e729f40a58b35eeeaf2dc02bd3a1ad3bf96e89

  • SHA512

    07e2721afe77d8139deb4273396017657dfdd2e028b84291c54493804bf07a2f5749b5a417b863375254e4eb9a35ef6ab3c7b25fb22f15c8ae3d7f1adc3e2f35

  • SSDEEP

    3072:S5K/B0toLQSNJrlxwsx89TSdBgjMqqDL2/TOK8NG:ScytwtyTTSdBgQqqDL6SKP

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_f9f049b55161d2144dda9338538dd118_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections