Overview

overview

10

Static

static

10

2024-05-26...ny.exe

windows7-x64

3

2024-05-26...ny.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-26_6d20daded36103e48bff7c1c0b7ad8e3_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    6d20daded36103e48bff7c1c0b7ad8e3

  • SHA1

    030a1ae2ab2afb15c241b176d12d9691ca6fd848

  • SHA256

    bc5666dd0a719fce8916d1695167df9edf211c4aa8d68a2746e7fc2daee3df0a

  • SHA512

    306fc5f7f97490795a1ba4d6c79900c0909b9564c1be59f310ddacd482b60c37c24ccb81be45991d3e5e1af6d464e8345ffd8373ccd11a8c3fe26f5d0df00e4e

  • SSDEEP

    3072:l5K/B0toLcSNJxlZHQsozTS+SMqqDL2/TrKQRG:lcytwBb1yTS+xqqDL6HK/

Score
10/10
gandcrab

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-26_6d20daded36103e48bff7c1c0b7ad8e3_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections