General

  • Target

    2024-05-24_7960f2e22609e9b2bb99b0050a3295c1_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    7960f2e22609e9b2bb99b0050a3295c1

  • SHA1

    4218e82b8b06d82a61a328b0cb2bc2c43b75345b

  • SHA256

    963b13c8221a36430a41479ea4d4436b0e7c6305141fdfb7a21462d0223e3ace

  • SHA512

    7dfe601e9d68459d814c525a9bb98f7bdc3c2723369b5b9dcca5a73f34b478a6d1bdc97bd44be0346dde25a0909bd392991f506260cd0601c2d3ea890a7bc185

  • SSDEEP

    3072:S5K/B0toLQSNJzlxwsx89TSdBgjMqqDL2/TOK8SG:ScytwtCTTSdBgQqqDL6SK0

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_7960f2e22609e9b2bb99b0050a3295c1_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections