General

  • Target

    2024-06-20_a090425e1ab06d7c5349b42f825fb2c2_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    a090425e1ab06d7c5349b42f825fb2c2

  • SHA1

    e55d03805c9242816033834a030e9f93913955a6

  • SHA256

    fb83f1638eac81e8f2e1b8b072e260d13af2e8d62b91edea23363851bcca95d0

  • SHA512

    3c89d0cfc3d287e1eb3583f64f354b62b7c89723bbeae54bfc4181248aa0216dbcd755cf5bdff7a75c7983ccf86be284b0bc2606136ece04c9d3a7e130beba4e

  • SSDEEP

    3072:S5K/B0toLafSNJzlxwsx89TSdBgjMqqDL2/TOKnYG:ScytwP2TTSdBgQqqDL6SKt

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-20_a090425e1ab06d7c5349b42f825fb2c2_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections