General

  • Target

    2024-01-09_c375c025d2d843fe2f6584039f13845f_gandcrab

  • Size

    147KB

  • MD5

    c375c025d2d843fe2f6584039f13845f

  • SHA1

    7fcbe2c2be4d7fadfc4ee6faea9ee7e55516d9e1

  • SHA256

    c292b4235f541a2b29e67b29554f28ed38af3d58803d6d1c410e84fec414e173

  • SHA512

    6b1451942d2aa6a785f30dbca78734c059e59f12be2639b7b02c959b6b859a9b170061109c526b22e5b2e3d9d3f7532cde1f8dbbaf4359aa442cce456e4e9234

  • SSDEEP

    3072:pBounVyFHFMqqDL2/LgHkc2U6FiPZ8aewZ2ql5f2J9lj:pqxHmqqDL6EHl2U6CbeOl5f2Fj

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-09_c375c025d2d843fe2f6584039f13845f_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections