General

  • Target

    2024-05-24_3cc86b91083e40060d7bc7bb5fd9a46c_bkransomware_gandcrab_karagany

  • Size

    143KB

  • MD5

    3cc86b91083e40060d7bc7bb5fd9a46c

  • SHA1

    fd9522992614930ef7c003c4d7c5ea459d905f5e

  • SHA256

    cc2ee378436c853e5375fe34e2fa986c5f6ba1039d5ace8a34838f3d8cea17bb

  • SHA512

    3bfa5a2b8e2f62e4e481d373c3436ce2da7ab05600ce2a0f4a9a72992fb1d1bccf731e63446be63638d34c1bb80b8be92117e6de9874772c62140f3f0d9f8134

  • SSDEEP

    3072:o+HcL2GCfSTntqSQRruiMZMqqDL2/AwvdV7Vjp9:h8DtORruiMyqqDL6tvd3p9

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_3cc86b91083e40060d7bc7bb5fd9a46c_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections