General

  • Target

    2024-03-26_5a1e433b6e212c80c4e89aed466063ee_gandcrab

  • Size

    70KB

  • MD5

    5a1e433b6e212c80c4e89aed466063ee

  • SHA1

    f081049f1c646c31d0250474355633e2b083fbd8

  • SHA256

    ce2199462d97f952ae5e2704a204e10447d91e3ac45f3c64ec22b547cae4f041

  • SHA512

    b76dfe609f6dbf34dbec75754850451273c4a07809c9a1fea5592f5676b6eac29839773650f5c40927d63a61908716a4b4a2fd65fab424bed8f90530382d1757

  • SSDEEP

    1536:/ZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Wd5BJHMqqDL2/Ovvdr

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-26_5a1e433b6e212c80c4e89aed466063ee_gandcrab
    .exe windows:5 windows x86 arch:x86

    8735e6cad23590d9b5b60978db488a28


    Headers

    Imports

    Exports

    Sections