General

  • Target

    2024-01-01_11a72b27d1a532c2effbdc3ab8da1fe7_gandcrab

  • Size

    147KB

  • MD5

    11a72b27d1a532c2effbdc3ab8da1fe7

  • SHA1

    2337b1b9cefcc65ecf698adc22d06d57c1a76d52

  • SHA256

    eb7b52ce02cab625984473365ac3340fc99cb0ba0084823594ed0070d466626b

  • SHA512

    c8fb754dd5ed45bf344da660d9992f28e75807bfd43023b5fdddb5d6bfc740d3c919ecc9a14d13b676541c2f10a8032080732c76ef9679ff076c70c71c3e763e

  • SSDEEP

    3072:sBounVyFHFMqqDL2/LgHkc2U6FiPZ8aewZ2ql5f2J9lj:sqxHmqqDL6EHl2U6CbeOl5f2Fj

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-01_11a72b27d1a532c2effbdc3ab8da1fe7_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections