General

  • Target

    2024-03-28_4c4863f1260d6d924cb5aa82d45a7193_gandcrab

  • Size

    70KB

  • MD5

    4c4863f1260d6d924cb5aa82d45a7193

  • SHA1

    2bd997c5e1076da0a652cdb09e32b0ee695d9ef8

  • SHA256

    2f7514b8fc4334f06e4977e6d0441a93552af4b6e6cded45ef6c5480a3f0cf71

  • SHA512

    7607be93b74ef50bec2cad9f810ce6a932ff95aaf3f731d3de5eb26695d9df39cecc719968346b8431467a525943e117c65f67c9881e0c77bcce3cf6993843b8

  • SSDEEP

    1536:8ZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Dd5BJHMqqDL2/Ovvdr

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_4c4863f1260d6d924cb5aa82d45a7193_gandcrab
    .exe windows:5 windows x86 arch:x86

    8735e6cad23590d9b5b60978db488a28


    Headers

    Imports

    Exports

    Sections