General

  • Target

    2024-05-25_c7635e122e8e8aa2d17ab1ae882d22b2_bkransomware_gandcrab_karagany

  • Size

    141KB

  • MD5

    c7635e122e8e8aa2d17ab1ae882d22b2

  • SHA1

    ed08bc87f6b4b5a18361eed29303728cceadc2b9

  • SHA256

    e477971aea7422a9b1d82bc9bb0ee480bbd26263ae38fa2fede30c248978cb30

  • SHA512

    b16d3b5298681e557846df9d1a5895fb182ef0d0f103ab7d9905af0d3f2a5b07b8e86a11412ba712791955229690de4cf340569c9ecf066a79b0569eeafba961

  • SSDEEP

    3072:m5tmM+mbqQHGUs4QL1nMqqDL2/OPvdlO:m5t3aj4QL1MqqDL6svdlO

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_c7635e122e8e8aa2d17ab1ae882d22b2_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections