General

  • Target

    2024-04-10_36234cd7007f570f4d2d0b5b12c8f4f4_gandcrab

  • Size

    70KB

  • MD5

    36234cd7007f570f4d2d0b5b12c8f4f4

  • SHA1

    cbe8e48400e6a3fda18b153090024fc92daeafe5

  • SHA256

    a5dbcfe60dbe584e024f2a0bea7ac44a26ab58be27deae3d8de0a3602b4a8f33

  • SHA512

    490475bdddce34d2e27b8dca7e70e199214579a8b4e8a217d3973e09377646ce103e23f251e25c69325bf7b3bf05c4cb3c5701e7d0bbb42183787483e26340ec

  • SSDEEP

    1536:GZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:1d5BJHMqqDL2/Ovvdr

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-10_36234cd7007f570f4d2d0b5b12c8f4f4_gandcrab
    .exe windows:5 windows x86 arch:x86

    8735e6cad23590d9b5b60978db488a28


    Headers

    Imports

    Exports

    Sections