General

  • Target

    2024-01-28_8e6a5089a0d1c205f296b8bfffeade7c_gandcrab

  • Size

    911KB

  • MD5

    8e6a5089a0d1c205f296b8bfffeade7c

  • SHA1

    cf9fb09c2ab4a7b974e8154b1b27451af913bca5

  • SHA256

    ea174ddcb7e72fb32e51a0de2b6d71dd555afcdce07a89f5bcb60a445c5d0732

  • SHA512

    e6113d51e80f350404918caccf92862266e6dff617a827d704179aa75c850ebf7c64d20e9ef87a8286c5823d5322080d44b6d42df9918b8806098a543678571e

  • SSDEEP

    3072:bd5BJHMqqDL2/Ovvdrj4mpdS5IYgbIBYgs6puD1Md6VppIpmS3JqYgvgsEjWFYgd:bdJsqqDL6gvdr1adnWf1adIfnaditYG

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_8e6a5089a0d1c205f296b8bfffeade7c_gandcrab
    .exe windows:5 windows x86 arch:x86

    8735e6cad23590d9b5b60978db488a28


    Headers

    Imports

    Exports

    Sections