General

  • Target

    2024-05-24_dc958df8e40f4b251b896ddfc2b73d91_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    dc958df8e40f4b251b896ddfc2b73d91

  • SHA1

    165712e8c038984e05eb8521a41ad94f0ab40313

  • SHA256

    c95961a0a0fcb69745f946e5a923fde5d78e5241b241bb63cc85723d82437d96

  • SHA512

    84dc2671d7fe676a01eeb08664b8f868c0d2ed4998b9565e4899aaa1128b561a2b2a2ad7500fb46b4dea311eab7ea89c296795619c07e1b6fe9b5194d5aa9594

  • SSDEEP

    3072:m5tmM+mBqQH9Us4QL1nMqqDL2/OPvdlz:m5t3vj4QL1MqqDL6svdlz

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_dc958df8e40f4b251b896ddfc2b73d91_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections