General

  • Target

    2024-04-29_dc864a467df9eba2e63a9c3b8124054d_gandcrab

  • Size

    70KB

  • MD5

    dc864a467df9eba2e63a9c3b8124054d

  • SHA1

    4e7821aa0ab71829ecfd50d02b69d825db901886

  • SHA256

    993d9d51874a4618880f5ccf298905ea5962c1ad3f2f484ee3c1651f3c1bc467

  • SHA512

    f8c99c36e235821d1a92b6dd754a509c1236f623f76435aab4a239ccfcf67c51d2744efd6a5ade63117526abd62339bc4d8e336f9fc892390ab24e866422d78c

  • SSDEEP

    1536:nZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Od5BJHMqqDL2/Ovvdr

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_dc864a467df9eba2e63a9c3b8124054d_gandcrab
    .exe windows:5 windows x86 arch:x86

    8735e6cad23590d9b5b60978db488a28


    Headers

    Imports

    Exports

    Sections