General

  • Target

    2024-02-28_e0113a0aa84876783bdde1706cc73970_gandcrab

  • Size

    70KB

  • MD5

    e0113a0aa84876783bdde1706cc73970

  • SHA1

    f868362ea4376d802e51eaddf732531dbf47786e

  • SHA256

    fca28026fd084b06d07f0e44dce86222a7fb8b49b11572e8e9e5c3cc71e2b4b3

  • SHA512

    fb746a39ccdd5016e7e352cce0074970d66fdac0763d6db1a3fcd6b15ec1ff234cb6cbc9552d8c3c5932e5038e5999110dc2321cc156cdb9a1602aa870aa224e

  • SSDEEP

    1536:+ZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:dd5BJHMqqDL2/Ovvdr

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-28_e0113a0aa84876783bdde1706cc73970_gandcrab
    .exe windows:5 windows x86 arch:x86

    8735e6cad23590d9b5b60978db488a28


    Headers

    Imports

    Exports

    Sections