General

  • Target

    2024-06-23_31fa7bcdb7cde248d3a3c05716ea3912_bkransomware_gandcrab_karagany

  • Size

    143KB

  • MD5

    31fa7bcdb7cde248d3a3c05716ea3912

  • SHA1

    c0faddc4256dccb7f135fba99dc737060dd34140

  • SHA256

    7360a222ce1ff13619ae4be1a6df7debe90385408d1bed4a237be9fe7ec2bd1e

  • SHA512

    9f27ddde21b8f833a2c6b651b9cf271f86de5f247bf729bdbd423ebbef49c29936c6478016bc05fdb686bea2f5c616f27ffa7230eeb4625f8af30d8c9b15b448

  • SSDEEP

    3072:o+HcL2kCf6TntqSQRruiMZMqqDL2/AwvdO7Vjp9:h2DtORruiMyqqDL6tvd0p9

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-23_31fa7bcdb7cde248d3a3c05716ea3912_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    4b0a5cb1aa0992ea9901768198fd3e7e


    Headers

    Imports

    Sections