General

  • Target

    2024-05-24_5ad2bafe9288b2a9b318806f5e3f31a7_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    5ad2bafe9288b2a9b318806f5e3f31a7

  • SHA1

    80107099c5e384abefa1b5240e0402f01862d76b

  • SHA256

    c19970bfea59e918b228fbd54cdd02007c79e3a526c75b7e2c79cde4405926f9

  • SHA512

    c242bd0e640cf2e6a2ff4b251e547f2baa9490c1685b3acd33c0a599b995153a0f3dbd46e04bf6092dd29f554518afd8f1b795768b7276f7eb45b60d7521affb

  • SSDEEP

    3072:S5K/B0toLQSNJDlxwsx89TSdBgjMqqDL2/TOKR8G:ScytwtCTTSdBgQqqDL6SKT

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_5ad2bafe9288b2a9b318806f5e3f31a7_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections