General

  • Target

    2024-01-10_08f892f83894a24f95c2563c0fbed984_gandcrab

  • Size

    147KB

  • MD5

    08f892f83894a24f95c2563c0fbed984

  • SHA1

    1ffd70290d329c3d278318dee62b5692249e4444

  • SHA256

    466f815a96564cbf88bb86dafea0ce2a16e0da4cdb1a0ba0c4db78feba5e0002

  • SHA512

    e08c5beef45a4c20b9cf1a1ac2005ebb4a872205e1ec6ecf257b6007accdb235276c1bf87d00801dc4acc634252e626fc02613ee06206b2e18284d9ccb48c225

  • SSDEEP

    3072:4BounVyFHFMqqDL2/LgHkc2U6FiPZ8aewZ2ql5f2J9lj:4qxHmqqDL6EHl2U6CbeOl5f2Fj

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-10_08f892f83894a24f95c2563c0fbed984_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections