General

  • Target

    2024-04-08_c24063516be39c8d52e8cf94d8cd3a2a_gandcrab

  • Size

    69KB

  • MD5

    c24063516be39c8d52e8cf94d8cd3a2a

  • SHA1

    f4735555cb9449c148a7b588b7f4a870b2560c0a

  • SHA256

    440603e5edd02c418a2c02bfbcd1a87bb9c86495582ba24d2a7027f7644672f3

  • SHA512

    a7026ec4c934a72d079cbab38deeb2c420c1b18bc1c214a8fe61f86ca86d83881084a8c0fadbd2fd47724f92b84df54216752ab48c22b75ea3a24bfd9f08005c

  • SSDEEP

    1536:eZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd9:oBounVyFHpfMqqDL2/Lkvd

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-08_c24063516be39c8d52e8cf94d8cd3a2a_gandcrab
    .exe windows:5 windows x86 arch:x86

    6b11af918234585a966ca8fab046dc6c


    Headers

    Imports

    Exports

    Sections