General

  • Target

    2024-03-09_6c786d5e702c3b8196a67babff9c50e6_gandcrab

  • Size

    69KB

  • MD5

    6c786d5e702c3b8196a67babff9c50e6

  • SHA1

    1fce0aa0dcd34135348cc6f25fa8b3b15c0d1abf

  • SHA256

    499972d71e295a8ebd27a8acf5f5b9516dfbf70763a64056a2c5caf6320f2882

  • SHA512

    152f1dbf3cea719b8a81748bd4eb584c6be9273f91a70d5284c9319e433c0d4b7f927155edad85f2d8149f07c999c352e92a0a5ee1936ad25070c9a2747629d2

  • SSDEEP

    1536:FZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd9:ZBounVyFHpfMqqDL2/Lkvd

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-09_6c786d5e702c3b8196a67babff9c50e6_gandcrab
    .exe windows:5 windows x86 arch:x86

    6b11af918234585a966ca8fab046dc6c


    Headers

    Imports

    Exports

    Sections