General

  • Target

    2024-05-24_5bf0bfd5415e639130ca41d7d0d1e012_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    5bf0bfd5415e639130ca41d7d0d1e012

  • SHA1

    2257e93c9c74b3e642b82d75bb5e85e78867d377

  • SHA256

    9511e73fdb0621e399c131fa2a6ed200e3eb7869b6620a526aea20b4757d7d6d

  • SHA512

    3fcf661e44e1f340f956b31a786bf8a47d5d3b9fc355520318c7d19fdc72ff49f39f9e0d335a853a98f759e1038473393734610dde291e8e03b8b59f1ada5aa7

  • SSDEEP

    3072:x5tmM+mbqQHSErIsUoQrs5MqqDL2/O5vdle:x5t3mKmoQrsSqqDL6Wvdle

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_5bf0bfd5415e639130ca41d7d0d1e012_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections