General

  • Target

    2024-07-23_c6d50d6bb0c96c410652a068beaf9dbf_gandcrab

  • Size

    167KB

  • MD5

    c6d50d6bb0c96c410652a068beaf9dbf

  • SHA1

    631467ff17ce240e1d4ef8e624872e358b8ee8e9

  • SHA256

    87b15f46f55c4c2ba3eb14f34adee94a0b17b0a633715f565af286759487ebbc

  • SHA512

    2ea0e5e7160ffe112f36baa40d524fe218e759d82adb629723403d8eaecf5c4cffa037028da84904cca648b274cd7cc8d1af4dd83264f1e70a4c47543bdbd5d7

  • SSDEEP

    3072:xYHVHd2NpMqqDL2/mr3IdE8we0Avu5r++ygLIaa4jRv9OtNZpek:xyRqqDL6oREzZpl

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-07-23_c6d50d6bb0c96c410652a068beaf9dbf_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections