General

  • Target

    2024-01-29_38fdffcf1adf8c16e8af41f400cc6995_gandcrab

  • Size

    100KB

  • MD5

    38fdffcf1adf8c16e8af41f400cc6995

  • SHA1

    a7c540db913ed4ebdbabad8a73fb9a285ba8cfed

  • SHA256

    dd263e0a0614c1a68d21676144751c753b5ae98a856aa763be41daf1e490475f

  • SHA512

    01b8a277b2d875749370ff7382d98221d71bf7e6a1501d40bc31da039fc28b26e079cdfcae9042b56085972078cc716f1922c7b2f75f8d7b5718507187b1e741

  • SSDEEP

    1536:qZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2LkvdR:cBounVyFHpfMqqDL2/LkvdIYvQd2p

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_38fdffcf1adf8c16e8af41f400cc6995_gandcrab
    .exe windows:5 windows x86 arch:x86

    6b11af918234585a966ca8fab046dc6c


    Headers

    Imports

    Exports

    Sections