General

  • Target

    2024-09-02_172a88196ce3405aa4a9e19d55469098_gandcrab

  • Size

    97KB

  • MD5

    172a88196ce3405aa4a9e19d55469098

  • SHA1

    55373a60a188c5bbd3685435b6ef5b6b887b93ac

  • SHA256

    3bc5120243cc936298013657a125fdab20c566c66df837ebe4a5cfadaa90498b

  • SHA512

    b056ece63c3a9df371499f1a5f6f17f2e3e03bdf40fc8beda87653fffb0861e335e9deec81070c47463ac7e93dabdd58a0302603019f98a1a2cf9120d006dab3

  • SSDEEP

    1536:9ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAlMqqU+2bbbAV2/S2LNmHkf:hBounVyFHkMqqDL2/LgHkctc

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-02_172a88196ce3405aa4a9e19d55469098_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections