General

  • Target

    2024-05-26_802f74fba9bdd1f0b3601f09a018a68c_bkransomware_gandcrab_karagany

  • Size

    143KB

  • MD5

    802f74fba9bdd1f0b3601f09a018a68c

  • SHA1

    f10ed156340ef8f4627ae175aa9274678edcaf41

  • SHA256

    5b4afc4bb17a065a79e1fd3a8378d750dc4e3db88bcec92e0030018354f198dc

  • SHA512

    6c29f175e184156d01ddd888773d542763966d4d758c0f6435ce19bc2889ca69e6d3b6dd59abe787184e3d33037d33055f3100c09b58d8cb59682010a06c7bc2

  • SSDEEP

    3072:o+HcL2WCfhTntqSQRruiMZMqqDL2/AwvdG7Vjp9:hfDtORruiMyqqDL6tvdsp9

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-26_802f74fba9bdd1f0b3601f09a018a68c_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections