General

  • Target

    2024-05-25_fb1c18903ddf0cde994bd5805f711219_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    fb1c18903ddf0cde994bd5805f711219

  • SHA1

    f03e293562d1181ca483a713e9068d45da11e894

  • SHA256

    fbf31fe421181149d2b4e545d59b40a6ab9f6ac9f9a60d9e97cc0320ee46f89c

  • SHA512

    4f9f0382d3a02743a03342a1a49360338acb3395f1ba9bc01059f09566dc7818ffea70a0ab114075b5d8f927bee92c74570076002d04a7735407f0e906ec5090

  • SSDEEP

    3072:m5tmM+mBqQHlUs4QL1nMqqDL2/OPvdlz:m5t3Xj4QL1MqqDL6svdlz

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_fb1c18903ddf0cde994bd5805f711219_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections