Overview

overview

10

Static

static

10

59a3cab6ff...JC.exe

windows7-x64

10

59a3cab6ff...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59a3cab6ffde41ef1fe8e2c24c05a3a1_gandcrab_JC.exe

  • Size

    97KB

  • MD5

    59a3cab6ffde41ef1fe8e2c24c05a3a1

  • SHA1

    136e2ce90a1aa2e704133970fe4da537cd262396

  • SHA256

    16bbe80420de619c41c1063899e027d410762ed850c3fd237950564dddf188fe

  • SHA512

    731dd3e00b6f0eee7f88cdfeba3d79a42ea7c63a50d8a81a376777c078fc56d120f8f959756833e154ab04350e41f2a1c48f10bc4d68d0be1f14bb3926316209

  • SSDEEP

    1536:UZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:qBounVyFHFMqqDL2/LgHkc2

Score
10/10
upxgandcrab

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 59a3cab6ffde41ef1fe8e2c24c05a3a1_gandcrab_JC.exe
    .exe windows x86


    Headers

    Exports

    Sections