General

  • Target

    2024-05-24_e3a5576ec8af43f4c19a673a4b1be150_bkransomware_gandcrab_karagany

  • Size

    143KB

  • MD5

    e3a5576ec8af43f4c19a673a4b1be150

  • SHA1

    c4b841c15726293cf550d3d638c198f09a4f4191

  • SHA256

    94f53e7ed25cbc98a94b11629e9b5de52fee7620f4ccb9a1e76efb6c00d0bfac

  • SHA512

    c8df2f633419fb9b5b4edf84d3df264a442bd8bcdea386b4854e573eef4ff66d4952240aac8079af69f439e465b53e0b1474b4c28bf07ffca48e03017c563d11

  • SSDEEP

    3072:o+HcL2ICfUTntqSQRruiMZMqqDL2/AwvdG7Vjp9:hcDtORruiMyqqDL6tvdsp9

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_e3a5576ec8af43f4c19a673a4b1be150_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections