General

  • Target

    f5f5f395ae4a49exeexeexeex.exe

  • Size

    126KB

  • MD5

    f5f5f395ae4a490c19586a138454e458

  • SHA1

    b36c889be0505101916177a0ac8ebb8dee1af280

  • SHA256

    3397944f5676d31a084465793f50959e7a24a120230feb3cd10d5fb9dc5c1d8c

  • SHA512

    6d9d685143d00884d5b3f6d78c7438f190fefe17746d8a3a03485232559e766b68d4a995a10d80fcd21fbe5a241fe7374b5905bff8c9fe437f43983b7c7f9ec4

  • SSDEEP

    1536:6ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHks:sBounVyFHFMqqDL2/LgHkc2oYvQd2a

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f5f5f395ae4a49exeexeexeex.exe
    .exe windows x86


    Headers

    Exports

    Sections