General

  • Target

    2024-05-27_605d7e3e4a7be56c8c56be744579b7eb_bkransomware_gandcrab_karagany

  • Size

    143KB

  • MD5

    605d7e3e4a7be56c8c56be744579b7eb

  • SHA1

    3f762e6d2e89388babbb1ce705610dc9ab2230b3

  • SHA256

    60a2b9b905c74f4b4a128758ebf1ce5321f70f972a7f877f35da0c2d52c6ac52

  • SHA512

    13b0cde9b9c713fd1382376ebc64c8f1547232a5191e7c0782558607d9b38573eac6a6ed0b1ed41944b6840ec72f51f32ef98a2d92269a36661552c1cfcde162

  • SSDEEP

    3072:o+HcL2ICfoTntqSQRruiMZMqqDL2/Awvdi7Vjp9:hwDtORruiMyqqDL6tvdop9

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-27_605d7e3e4a7be56c8c56be744579b7eb_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections