General

  • Target

    2024-01-25_6f542c085df139467ca31c48a5c6f956_gandcrab

  • Size

    70KB

  • MD5

    6f542c085df139467ca31c48a5c6f956

  • SHA1

    a6ba266c74150794a4cfb870b428e293d2cb131b

  • SHA256

    829d9e361224f8cbef90fcaccd4fd4ecfaa18547655ab77aea6b58fde51e29e9

  • SHA512

    f8690cc857cb95fabb39d5d3e8dfab762410221432f9c1c14555a02e0176486e56801ac5e1822c2821fb8f08b8e049dffb6f90e779c1da1020a3bb6dab944c3a

  • SSDEEP

    1536:TZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Cd5BJHMqqDL2/Ovvdr

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-25_6f542c085df139467ca31c48a5c6f956_gandcrab
    .exe windows:5 windows x86 arch:x86

    8735e6cad23590d9b5b60978db488a28


    Headers

    Imports

    Exports

    Sections