General

  • Target

    2024-01-10_d1bbe0a817818993e1bd0e0ff93a788a_gandcrab

  • Size

    147KB

  • MD5

    d1bbe0a817818993e1bd0e0ff93a788a

  • SHA1

    1b16590a06a7392ca119f19fa83fdb2d113ed009

  • SHA256

    d5df7638bf25170ebf25d7b75bb77c0edc546789fb24e3b63d00eaff938280c6

  • SHA512

    173693fff4f73db30d304062ecd79e83f3440563e0095d37705111d3f1238c93169c20c1cdd50923270af994934caa2400cd7a2e49cfd7c8bdabda8f0fbefccb

  • SSDEEP

    3072:FBounVyFHFMqqDL2/LgHkc2U6FiPZ8aewZ2ql5f2J9lj:FqxHmqqDL6EHl2U6CbeOl5f2Fj

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-10_d1bbe0a817818993e1bd0e0ff93a788a_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections