General

  • Target

    2024-05-24_2fea028c3d4d58d33a69ca5ce2700a7a_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    2fea028c3d4d58d33a69ca5ce2700a7a

  • SHA1

    3be0315288f442996131bd97c1fc25e49116660e

  • SHA256

    ef1743d3d12c3869cc253e233fed82a74d366154f8ec05dd1aa1e807e1135eed

  • SHA512

    20522c73979abb5d6a5e40e7a36e3675bdaf6f7d10b5b6f43c01ec8f00340cbe7659556d03140732adb73fb72259039cb0b868c5ae4bafa1f7c1b3117656c8b2

  • SSDEEP

    3072:zBb+U8i8qQH77FYb6+KIyMqqDL2/sEvddNdY:zBb/uRYb6+KIRqqDL6ZvddA

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_2fea028c3d4d58d33a69ca5ce2700a7a_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections