General

  • Target

    2024-05-04_1e88ded301da649198336563175682ea_gandcrab

  • Size

    69KB

  • MD5

    1e88ded301da649198336563175682ea

  • SHA1

    c0c0b3d7fde701050aa8c201ae2f276c903a561f

  • SHA256

    a1c5dfe01bcdbf480e8dd041dd0ab95bace92962ed28505c4f3370b40f3a6943

  • SHA512

    046e3baac7e38616c9a1ffecfb452276e69a6d9b89dd0daf359661d8c6d5811419140882693ee9b3a69c052aec4f78f071658043a58c71473ee269f7d0ab6b1e

  • SSDEEP

    1536:rZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd9:rBounVyFHpfMqqDL2/Lkvd

Score
10/10

Malware Config

Signatures

  • Detects Reflective DLL injection artifacts 1 IoCs
  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-04_1e88ded301da649198336563175682ea_gandcrab
    .exe windows:5 windows x86 arch:x86

    6b11af918234585a966ca8fab046dc6c


    Headers

    Imports

    Exports

    Sections