General

  • Target

    2024-05-31_1186ab4ac587568e356f3de8a73112ac_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    1186ab4ac587568e356f3de8a73112ac

  • SHA1

    8d6216ef5ec907fafc9abe97bc2946d4b77622c6

  • SHA256

    162c4aaeddbaa31a994006d2612c52a373109d48e2e2eff824d19dfc4404f11d

  • SHA512

    26238d878df849e9e95b5c5fdbbe4e004c9c61558440c84e532efcb011b7021af2cb98cf5ac73a72c7bc2d39c780fd19f3635ebaf2dca2bb6024592137ab70cc

  • SSDEEP

    3072:S5K/B0toLQSNJElxwsx89TSdBgjMqqDL2/TOKauG:Scytwt3TTSdBgQqqDL6SKi

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_1186ab4ac587568e356f3de8a73112ac_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections