General

  • Target

    2024-05-26_e244a17c156de21c5f6ef3e09cbf2670_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    e244a17c156de21c5f6ef3e09cbf2670

  • SHA1

    a8505f39878deeb32e78aa184d1bbcf28d209c68

  • SHA256

    01a226edb46afcaf963ade9e4a71f83c08dc6a435045435e4faa0940a0734e1d

  • SHA512

    d0c9cd9d6c6a75f16571190f6d2b43138489d91282e7b2b64531691bd7c0b2cdd71932155c51cef2e580d9b52dc1420d3e063cc17aad9f2af1974f4e65bc92ad

  • SSDEEP

    3072:OAlNYVO3ySNJzl+JMsEocSfgMqqDL2/TXKXqNG:OA8VeXg5cSfLqqDL6bKXd

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-26_e244a17c156de21c5f6ef3e09cbf2670_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections