General

  • Target

    2024-05-25_3713d00b1151d8a9ed3bd887d949a536_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    3713d00b1151d8a9ed3bd887d949a536

  • SHA1

    1d363da9a8462c76a1bd003442054985bc2f9fb4

  • SHA256

    79cb238b64b90df0bc79b8ebf01470f2f2326379326b04e8856faf47e08c4e96

  • SHA512

    29e679e2a7a02ed06063c1fae64e349c46fd6c312ca5f48ab25f01b1f72a508c5ec9f8028e5924a74318af427856ae32f27ca5bff67d64994a7f5365c4224e73

  • SSDEEP

    3072:m5tmM+mBqQHxUs4QL1nMqqDL2/OPvdlz:m5t3Tj4QL1MqqDL6svdlz

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_3713d00b1151d8a9ed3bd887d949a536_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections