General

  • Target

    2024-06-20_e582a1df8ce0f2e8beead76294cc9c55_bkransomware_gandcrab_karagany

  • Size

    155KB

  • MD5

    e582a1df8ce0f2e8beead76294cc9c55

  • SHA1

    baf1ee0b75f49881e4c5e87d7c094951b9684b63

  • SHA256

    d9b103c1339efcc6bf6a63fab54ea98e10b2bf82bbe51ce288ed9a646a7069b5

  • SHA512

    7073494be64abcb05d80d0efd78e1af82bbf8aeea37e5b46b8e01d50c0bd376a2771a821ca312608ca7b5ecac1fb21ba0ccfd3dd93bd7b5b5bbdf7aea8498359

  • SSDEEP

    3072:l5K/B0toLbSNJblZHQsozTS+SMqqDL2/TrKPzG:lcytwGV1yTS+xqqDL6HKi

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-20_e582a1df8ce0f2e8beead76294cc9c55_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7848011b763d00cd02658995847dd30b


    Headers

    Imports

    Sections