General

  • Target

    2024-03-29_1516dae988173aec2ba88811b82e3f1a_gandcrab

  • Size

    70KB

  • MD5

    1516dae988173aec2ba88811b82e3f1a

  • SHA1

    7b74fe342eef8daaa46a2f026b6dcb36775c13cd

  • SHA256

    23acfab5677dbefa7397fedaad427ca1705f929fec880dda8a2ebc51b1cb2b5f

  • SHA512

    af39005bcb18f369cd9e2f96728d2e9556fdfa4718abffa85cb4c39704a712a88d5e34744d03b8918519e162cf3dfafd4acc2cce18e72b8e61702133a28d07b4

  • SSDEEP

    1536:vZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Gd5BJHMqqDL2/Ovvdr

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-29_1516dae988173aec2ba88811b82e3f1a_gandcrab
    .exe windows:5 windows x86 arch:x86

    8735e6cad23590d9b5b60978db488a28


    Headers

    Imports

    Exports

    Sections