General

  • Target

    2024-05-24_a82ceb8e4fe0562c0dbcb850514bbd4d_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    a82ceb8e4fe0562c0dbcb850514bbd4d

  • SHA1

    c1d57b6150255844030fe6f851fb194816a51678

  • SHA256

    3cfcbd8427aba6b4f4fc652b4b8b532ec242cbd02b0f32fbe3a3c70262ff5cd6

  • SHA512

    db437fc27c3d85f0e389fdf2627130c3f230f00d1b756456e5bb9796a4ee3fa9cb5c86edf8566bbc74891dd46e82f1804328ce9340401ec313e230028114093a

  • SSDEEP

    3072:l5K/B0toLQSNJHlZHQsozTS+SMqqDL2/TrK/mG:lcytwtl1yTS+xqqDL6HKP

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_a82ceb8e4fe0562c0dbcb850514bbd4d_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections