General

  • Target

    2024-05-24_e5777596572395d485770b5a07b6f2f0_bkransomware_gandcrab_karagany

  • Size

    143KB

  • MD5

    e5777596572395d485770b5a07b6f2f0

  • SHA1

    56b6167a37c0cf78ee58449b8ab654944ffc6d33

  • SHA256

    c498f87e8ad8db52cd748330a47a3136b4cff73efdc56f6253714fe0e235cc88

  • SHA512

    e3658d88b66fe08aa8f6bda814b27d762d4f30dbf5ee86abbd5501d98ee8b411a3b1cf64e7cdd14fccc69de33ffc14f084183393c141ea95340ce19307b1ec7c

  • SSDEEP

    3072:o+HcL2ICf9TntqSQRruiMZMqqDL2/Awvdr7Vjp9:hlDtORruiMyqqDL6tvdRp9

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_e5777596572395d485770b5a07b6f2f0_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections