Overview

overview

10

Static

static

10

2024-05-25...ny.exe

windows7-x64

3

2024-05-25...ny.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-25_0b6967542d6ee44a32d350db9af2c64f_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    0b6967542d6ee44a32d350db9af2c64f

  • SHA1

    97ce0ad2b3690d0e22e52f020f1abf1a19aa6dfe

  • SHA256

    10067b1c67de673f05fdf13a8be8da216b105ac94b555a92a4e5e72e9bef54dc

  • SHA512

    fc01beca95ede8fdc2596ab018a958362a1a8d581da2c9fd7864e0cfd340bf90c386e7c7946b5659c7083bc6ceb11cc7696a3ff54adf9121e42a51d2eeff699f

  • SSDEEP

    3072:m5tmM+mBqQHwUs4QL1nMqqDL2/OPvdlN:m5t3aj4QL1MqqDL6svdlN

Score
10/10
gandcrab

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_0b6967542d6ee44a32d350db9af2c64f_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections