Overview

overview

10

Static

static

10

2024-02-19...ab.exe

windows7-x64

10

2024-02-19...ab.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-19_acbf539a92456a6d85b044efdbc98e3e_gandcrab

  • Size

    97KB

  • MD5

    acbf539a92456a6d85b044efdbc98e3e

  • SHA1

    d47cb89e16df9c2e74759446e652840fbd4f7ec6

  • SHA256

    4ef62b73025d77b55888d5665fab4f69231d023f6ae7665c464328f32c1883c2

  • SHA512

    9c95b2908a53debce53ec1fbab88167c297302d70613fd3f2f261967c3d2c307a693c67849123d52e3dc949840e6a3a4eedecd09da4051c488be0d5a953daa02

  • SSDEEP

    1536:3ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:/BounVyFHFMqqDL2/LgHkc2

Score
10/10
upxgandcrab

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-19_acbf539a92456a6d85b044efdbc98e3e_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections