Overview

overview

10

Static

static

10

2024-01-29...ab.exe

windows7-x64

10

2024-01-29...ab.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-29_d5cc4d682b0bb6e84a1ee96043975428_gandcrab

  • Size

    97KB

  • MD5

    d5cc4d682b0bb6e84a1ee96043975428

  • SHA1

    8b250781641aa6d83f8c00e578c6c06624861145

  • SHA256

    4e51eadc879e3a69469f6ed45510dea42ba8f89ec6c75f303a986431b0b4bbb9

  • SHA512

    2b92fea4af5c4d8a173a7fd286af0f9eee31f258e92fbb2561aa54d312eb0d4eedf93abd60bf346db0d5ad5af2eb2afd61ad423adb1c6617d90081396206134f

  • SSDEEP

    1536:CZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:kBounVyFHFMqqDL2/LgHkc2

Score
10/10
upxgandcrab

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_d5cc4d682b0bb6e84a1ee96043975428_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections