Overview

overview

10

Static

static

10

2024-05-25...ny.exe

windows7-x64

3

2024-05-25...ny.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-25_bf270d9b8c2799a5a64298e1f47bdb58_bkransomware_gandcrab_karagany

  • Size

    143KB

  • MD5

    bf270d9b8c2799a5a64298e1f47bdb58

  • SHA1

    d5e27b7296e158771c628ce5450cc56193293a8f

  • SHA256

    c2f9682d9b8252a98bbea0398424711cfd4ab53afe2644e86bc7a3ac42facddf

  • SHA512

    f3bf1abb1e1e5ec4b84996521716297fb5ad4d437e9fdf6600d18df130f7b0aea9f822a46b56cb8f8b161837824c272b296cc05cbecc26b66eee246837ff8248

  • SSDEEP

    3072:o+HcL2ICfcTntqSQRruiMZMqqDL2/AwvdH7Vjp9:hkDtORruiMyqqDL6tvddp9

Score
10/10
gandcrab

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_bf270d9b8c2799a5a64298e1f47bdb58_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections