Static task
static1
Behavioral task
behavioral1
Sample
c2464e1aa533ead8d2c2d27a388ae2617616cf17c2c4936b72991e33f0c2ccff.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
c2464e1aa533ead8d2c2d27a388ae2617616cf17c2c4936b72991e33f0c2ccff.exe
Resource
win10-en-20211208
General
-
Target
c2464e1aa533ead8d2c2d27a388ae2617616cf17c2c4936b72991e33f0c2ccff
-
Size
996KB
-
MD5
a847df6b845406d596e0b503cab9eb6e
-
SHA1
a9ed2b6fee6e32cdb653cecff32921627d6c636e
-
SHA256
c2464e1aa533ead8d2c2d27a388ae2617616cf17c2c4936b72991e33f0c2ccff
-
SHA512
09ae83dc03a6b2ce60b00a56c9e1b336a2862653434c0d2cf3d17cdcff1e7b0fea0309a19dfb2f845b79c45485f7a8a4f50287da035016fbe9eaf56569654921
-
SSDEEP
6144:J4qw0VQFivzB87NFMxyUxquyKCaI8eckvWSBx/4:3wGQwv1GvSOuybB8TkeC4
Malware Config
Signatures
-
GandCrab Payload 1 IoCs
Processes:
resource yara_rule sample family_gandcrab -
Gandcrab family
Files
-
c2464e1aa533ead8d2c2d27a388ae2617616cf17c2c4936b72991e33f0c2ccff.exe windows x64
Code Sign
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 996KB - Virtual size: 996KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ