General

  • Target

    2024-05-31_f0c207b8d336f4f02b810f8ebd5acd17_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    f0c207b8d336f4f02b810f8ebd5acd17

  • SHA1

    3ae5d43ef86bfff31915950c8292d9a1a52369d1

  • SHA256

    cbe388ef01c8af391f4a75ce6d22ffad32fa26a2c9fb507ee9a409b39d17a02c

  • SHA512

    e97541a19f1c1f5416570a12cf464c0d2475237efbafe9b8f142d184e571c95d1b03afeda861d757247e5e3be4ec9dda798d59ab6db240069edd9ed26e2cedd2

  • SSDEEP

    3072:l5K/B0toLcSNJtlZHQsozTS+SMqqDL2/TrKLhG:lcytwB/1yTS+xqqDL6HKA

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_f0c207b8d336f4f02b810f8ebd5acd17_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections