General

  • Target

    2024-05-25_30fb183e33ddd0d16dc785e2b9683862_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    30fb183e33ddd0d16dc785e2b9683862

  • SHA1

    3e8f4312e84a86a616c80911deff7fd94134976f

  • SHA256

    5f29f4941dc736bbc60ef3bbf751746274eec7ccc66a1bf7fa400cbb970b4fdb

  • SHA512

    783b26078fa6580bb29a76a6e29944d8660864a4d773e8071dfe5922176e92384e498b543fdfe6522fce4b812e7eacbb67c1050161aa7312038a1e897972997b

  • SSDEEP

    3072:S5K/B0toLQSNJ/lxwsx89TSdBgjMqqDL2/TOKw6G:ScytwtGTTSdBgQqqDL6SKo

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_30fb183e33ddd0d16dc785e2b9683862_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections