General

  • Target

    2024-05-24_4a300a9c872af7b95764143c471b42fb_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    4a300a9c872af7b95764143c471b42fb

  • SHA1

    7a7abb8b8eae0933a019e1210ce75e8d31bb6320

  • SHA256

    242dbc5d92c09f6853e162d63bc165ec56d42b56a8264d7c81fc0f557f316ae6

  • SHA512

    a87dfadfce7bf083382ab3dec32c6913fb0e32531816d5bf2808f8cb9edc2f8ab80f1a286267aad5b17b4036dffd000d244399d4dc809cd0f7859e2fca98a5f3

  • SSDEEP

    3072:m5tmM+m+qQHCUs4QL1nMqqDL2/OPvdlR:m5t3jj4QL1MqqDL6svdlR

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_4a300a9c872af7b95764143c471b42fb_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections