General

  • Target

    2024-05-24_809441861414f19d0da5e76f1eedb384_bkransomware_gandcrab_karagany

  • Size

    139KB

  • MD5

    809441861414f19d0da5e76f1eedb384

  • SHA1

    e1ce39c3588ad981e36b3f6c88df3f3ad971b671

  • SHA256

    1b6c1d7ce67a2b96143c5a52f814848ff1350c23f073ba56509820e959add5d9

  • SHA512

    9caf8e23ebb5937098d0e7683ac62b63598292d7fcc2dd5b53da9df920ba6a28947def20e6e404f8ccca14600e72f8dcf63ff1192779917b54727db580df348a

  • SSDEEP

    3072:IRDukUiItqQHwVT9NwoPsaMqqDL2/Ogvdut:IRDfg8VwoPsJqqDL6Pvdut

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_809441861414f19d0da5e76f1eedb384_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections