General

  • Target

    2024-02-17_8a59c48a36d1509e432230b62dec6708_gandcrab

  • Size

    70KB

  • MD5

    8a59c48a36d1509e432230b62dec6708

  • SHA1

    4a247ca6fa84ade5cfbd33b08262e5cc9b55920c

  • SHA256

    1ec9498101a2843490bfd011199490ac0fcb8a908cd8decf197359438aa7c217

  • SHA512

    8190f1c264fd0b348dff07552f9468224c01c73c4bb755408b26b53f902d1b17af49f50fa1bad965c1bb5d27b71ab86a97cae195908faa2389d93a036b93aff2

  • SSDEEP

    1536:pZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2LkvdG:VBounVyFHpfMqqDL2/LkvdG

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-17_8a59c48a36d1509e432230b62dec6708_gandcrab
    .exe windows:5 windows x86 arch:x86

    6b11af918234585a966ca8fab046dc6c


    Headers

    Imports

    Exports

    Sections