General

  • Target

    2024-02-20_89daa8209b733e8cbffb590a639b9a80_gandcrab

  • Size

    147KB

  • MD5

    89daa8209b733e8cbffb590a639b9a80

  • SHA1

    b98904e82fd30c39d02a98a058f9afe6fd014597

  • SHA256

    0e64fcc8ad1a384d2a314de65bd751e2c66fd2a159bd849ed0cfd72f7dc88ffa

  • SHA512

    9896389c3e710a2b1260e1f23e23067112b19a661a358ca6521feee28f06e861e7cd44a8abc2f67eddafc0ce93466007fb5808dafcb742ae6221f76a4531b59a

  • SSDEEP

    3072:LBounVyFHFMqqDL2/LgHkc2U6FiPZ8aewZ2ql5f2J9lj:LqxHmqqDL6EHl2U6CbeOl5f2Fj

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-20_89daa8209b733e8cbffb590a639b9a80_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections