Overview

overview

10

Static

static

10

8eb6f5020e...JC.exe

windows7-x64

10

8eb6f5020e...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8eb6f5020e7fc5c353f0e52f6d2bf584_gandcrab_JC.exe

  • Size

    97KB

  • MD5

    8eb6f5020e7fc5c353f0e52f6d2bf584

  • SHA1

    6d886d9ae086d2846ba861ad7a1a8691eafc59f7

  • SHA256

    98cb9f5bed26d2648124880253d53785d03252b13337d4276aff05234d555913

  • SHA512

    bfed9dc13cecd87cc3e9c173e5c0163652da83e8419983cf78ca614b5cc34e3720df7459ff4a1cf77426e427a220f22cd42564742f61b61a40e4068eb4f378f3

  • SSDEEP

    1536:VZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:pBounVyFHFMqqDL2/LgHkc2

Score
10/10
upxgandcrab

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8eb6f5020e7fc5c353f0e52f6d2bf584_gandcrab_JC.exe
    .exe windows x86


    Headers

    Exports

    Sections