General

  • Target

    2024-05-31_aab27cc3367636dce042a79b59b7c4e5_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    aab27cc3367636dce042a79b59b7c4e5

  • SHA1

    25eee943f9d15ff84f6b252220414e230557f20e

  • SHA256

    d966c96c7ad64cee64648b6dfacb794431acd180c4c20376d86ce22109982ad4

  • SHA512

    cb1ba45077712bd2c06b85a2500a6da076be8317b163e92a68eb23e797c662aa661d96eebbcc31787f8824b6403f0c001045d9722950da2e20b18179fdffb6f9

  • SSDEEP

    3072:l5K/B0toLQSNJzlZHQsozTS+SMqqDL2/TrKG8G:lcytwt51yTS+xqqDL6HKs

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_aab27cc3367636dce042a79b59b7c4e5_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections