General

  • Target

    2024-05-24_89ce2d9524d8298bd61594db89bd1725_bkransomware_gandcrab_karagany

  • Size

    143KB

  • MD5

    89ce2d9524d8298bd61594db89bd1725

  • SHA1

    def0868febb71e116fc4c6d81f19630d0d9a8e30

  • SHA256

    386f96f22716384e1f0c834773afe2bfdbd8d7deb31407c61c788b5f28b99898

  • SHA512

    925454a3fb250b3f8fa037ce3c890dc89579a9192f7f66a566e5d900046455548e74da52b997f55d2c7ef87b4914fa7ce719e74112c6f8b1091e0d594820f04b

  • SSDEEP

    3072:o+HcL2ICfOTntqSQRruiMZMqqDL2/Awvd27Vjp9:hGDtORruiMyqqDL6tvd8p9

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_89ce2d9524d8298bd61594db89bd1725_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections