General

  • Target

    2024-05-24_7491c12ec32364c06e075b98783bb53f_bkransomware_gandcrab_karagany

  • Size

    139KB

  • MD5

    7491c12ec32364c06e075b98783bb53f

  • SHA1

    53ddc189d98ad473538b6b98ee4cdf841412b466

  • SHA256

    bc5bd14fe485d8110dc245d62beb15fc94f91c77b6526e10b9d27432229db78f

  • SHA512

    2621b31ea962a04ba4cf34f0f7e07fc64435c98bb17dedf27c13ad465e3d8ca3ce7da156312b4c639ce406cc66a141e1139f719e48994be13b498bedeac39295

  • SSDEEP

    3072:KRDukUiIbqQHpqgpwoPsQMqqDL2/OUvdCo:KRDfgTzwoPsbqqDL67vdCo

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_7491c12ec32364c06e075b98783bb53f_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections