General

  • Target

    2024-05-24_81aa4da086809497dabdf646f50943c8_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    81aa4da086809497dabdf646f50943c8

  • SHA1

    7da348458ab3a8779d420d49c6adfb969752d988

  • SHA256

    fe6c43b83ace188b8677fcea6460af51784400c3f1aed61ed8d8d9fe18ed99d1

  • SHA512

    d323904858b7d575eac367aded7d5dbb28704302f9a8b53be25112a2aeeb5a064687a7673b27684c3361307227cb5bcf097977f3e17d018eb61d9550aafbb388

  • SSDEEP

    3072:S5K/B0toLQSNJTlxwsx89TSdBgjMqqDL2/TOK8eG:ScytwtSTTSdBgQqqDL6SKk

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_81aa4da086809497dabdf646f50943c8_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections