General

  • Target

    2024-05-31_5794b17c1685f0765690c02000e746e9_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    5794b17c1685f0765690c02000e746e9

  • SHA1

    75b57d04e921facba293ff49087e7aec22c9dc5a

  • SHA256

    d7b8b6a14139e5ff3cef769f66dcba194d681f7f0a1d3c9131b3de047dfe56ae

  • SHA512

    f6e4b02666652b044ef6c01b7b5f7300d690252c6f9fa88619074d4b41563e8bb45d35ea658a9c542fac572dd52e2bb61f998caef1d0b4e60e16eaae41fdc0a2

  • SSDEEP

    3072:l5K/B0toLQSNJYlZHQsozTS+SMqqDL2/TrKvdG:lcytwt01yTS+xqqDL6HKY

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_5794b17c1685f0765690c02000e746e9_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections