General

  • Target

    2024-05-26_8687f994f166845fd9369483e26be48c_bkransomware_gandcrab_karagany

  • Size

    143KB

  • MD5

    8687f994f166845fd9369483e26be48c

  • SHA1

    b650cef2d602a4fce51db1136f4780f2ddd6d693

  • SHA256

    893c238aa5b9a5a3963af658ab3eabbfba2b4c23ea093089fcdb5af76ebe4c28

  • SHA512

    25192364f7555ec711556a593bc5126e213d4ac861949e411a37fac5fdf322427adf903e26915dc3f2029c16018ccebe43a4483bdc3c4b071b3f257da42ee9e7

  • SSDEEP

    3072:o+HcL2ICf5TntqSQRruiMZMqqDL2/Awvdr7Vjp9:hBDtORruiMyqqDL6tvdRp9

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-26_8687f994f166845fd9369483e26be48c_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections