General

  • Target

    2024-05-30_3c91db9bde69a4075ba81d45f1f509a7_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    3c91db9bde69a4075ba81d45f1f509a7

  • SHA1

    41366d24fce8c2538b8d424e9c3f0acd875b658d

  • SHA256

    c8f989fc0dba17d47c584d6da92460dc4b3397deadf1b24e450bd894f4487ecf

  • SHA512

    e68f03fec4aef95e07d15ae4683dbcfa6b555a443652c794bf39444f021b673d6aff61213ab4860848c45a267e8e29d0b9c19108cf8dd6228516d8a4fd41ea60

  • SSDEEP

    3072:l5K/B0toLnSNJYlZHQsozTS+SMqqDL2/TrKdcG:lcytwqA1yTS+xqqDL6HKD

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-30_3c91db9bde69a4075ba81d45f1f509a7_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections