General

  • Target

    2024-05-25_243e446b872e2b30216b8dca2b7e9e51_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    243e446b872e2b30216b8dca2b7e9e51

  • SHA1

    50cb82fea47e0e44d36dc4b09cb9f6bff8e9b616

  • SHA256

    a77e08b38ea9b48d86b1ee4a8ceeb469edcd885259f63a074d699108893b6c67

  • SHA512

    ffe8e572b5a23cbf06d3a133e8ad27cd664efbbfac30168e39f035a0d03a4cf24f0542bd7dfe2075cddf2276f7bc4162178d265c344092a413f2dff96d516d72

  • SSDEEP

    3072:l5K/B0toLtSNJBlZHQsozTS+SMqqDL2/TrK3mG:lcytwAj1yTS+xqqDL6HKn

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_243e446b872e2b30216b8dca2b7e9e51_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections