General

  • Target

    2024-05-24_8fb955b835a67327ae5cce0742c25868_bkransomware_gandcrab_karagany

  • Size

    142KB

  • MD5

    8fb955b835a67327ae5cce0742c25868

  • SHA1

    5ac1ba24244c05c129ee1f32d41df7f736a244e2

  • SHA256

    598cecd20f30aeb12e780376ebd3519a7c983ee2abeff57f743f8e1df9cfef88

  • SHA512

    b60dc2dbad40c3f0450ce0924d32f66bfc69bfdb093075504736f0ec327275c936936c39cc2711e481a5e3e532d16833074e55d9a3faf66186b8f35e37b20c92

  • SSDEEP

    3072:O9ABQSbfqQVxQn00b9WruiMwMqqDL2/ALvdjL:O9iQ6A0C9WruiM7qqDL6avdjL

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_8fb955b835a67327ae5cce0742c25868_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    6cbf594d5b903044e58ddf542ea9a7e8


    Headers

    Imports

    Sections