Static task
static1
Behavioral task
behavioral1
Sample
9cf10f8b2444eaa0c2fbbf199d5fe583923ed14cb92ddd5445b3e6ffcc86152a.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
9cf10f8b2444eaa0c2fbbf199d5fe583923ed14cb92ddd5445b3e6ffcc86152a.exe
Resource
win10-en-20211208
General
-
Target
9cf10f8b2444eaa0c2fbbf199d5fe583923ed14cb92ddd5445b3e6ffcc86152a
-
Size
996KB
-
MD5
baf770d79dd3a31238feb77922dee9f3
-
SHA1
c22c127d38a021768a468ad510af7f2198a3c410
-
SHA256
9cf10f8b2444eaa0c2fbbf199d5fe583923ed14cb92ddd5445b3e6ffcc86152a
-
SHA512
df7282f003611a09a6dc2edb5683790f491dd80079acd0a04d508adc9dfec5cad61149352dcd012cdad427927ee44653a864fbf0a667f88eff9ae0cb380d8ce4
-
SSDEEP
6144:+Q1+LtOYFxs8NNFMxyUxquyKCaI8ecpvWSBx/s:LAgYokvSOuybB8TpeCs
Malware Config
Signatures
-
GandCrab Payload 1 IoCs
Processes:
resource yara_rule sample family_gandcrab -
Gandcrab family
Files
-
9cf10f8b2444eaa0c2fbbf199d5fe583923ed14cb92ddd5445b3e6ffcc86152a.exe windows x64
Code Sign
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 996KB - Virtual size: 996KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ