General

  • Target

    2024-05-24_d0f18b454a2b25592dc904ebd3bf97bd_bkransomware_gandcrab_karagany

  • Size

    142KB

  • MD5

    d0f18b454a2b25592dc904ebd3bf97bd

  • SHA1

    388025915cd303bf526e52e4a1e4e839480fa300

  • SHA256

    77b3cc200686f16be50bc40278f0b89477963539d667b785aab5ad28948b95fd

  • SHA512

    6ceff16ee69de850f27e7f78d12d7c4f5e0a3f98fc0a5d68acfbab7ea2a4f1ec2e967847c39c1ce0f648655a3444c5d543c3322ac0a27a02ed8132d5c601b4da

  • SSDEEP

    3072:O9ABQSbfqQVrQn00b9WruiMwMqqDL2/ALvdjJ:O9iQUA0C9WruiM7qqDL6avdjJ

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_d0f18b454a2b25592dc904ebd3bf97bd_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    6cbf594d5b903044e58ddf542ea9a7e8


    Headers

    Imports

    Sections