General

  • Target

    2024-05-25_c74b1adf06e462c752ad1a181c225b75_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    c74b1adf06e462c752ad1a181c225b75

  • SHA1

    6c3ab9ff886be34fe9b861313e1f28574180a5d7

  • SHA256

    fce441f5d3a045a6bd22871988a2add48a865d554ee662a8824479ef5cffcd87

  • SHA512

    f4ceebac61a10616e0add63f47652d0fa0b426995ebd6dc2cebfe4c8a9eb4d4f3d937d615270f3b730fd0b3e8e5b6f2e777f9b7b5d1956ce08eb5ba499231589

  • SSDEEP

    3072:S5K/B0toLQSNJnlxwsx89TSdBgjMqqDL2/TOKwgG:ScytwtmTTSdBgQqqDL6SK+

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_c74b1adf06e462c752ad1a181c225b75_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections