General

  • Target

    2024-09-03_82e5bebd466df639b9baf5ae2bc7cae2_gandcrab

  • Size

    97KB

  • MD5

    82e5bebd466df639b9baf5ae2bc7cae2

  • SHA1

    8fcf26a1cbd5cc733fe18d016cbebbd276ca0732

  • SHA256

    494586c5a47101a61aa5f386e5fef5eb6c98c921543f3739602076ff85479bb0

  • SHA512

    cf7d528d0dd271105133804a3f91fb0cfb94736ad15fc1fd4c904bdebf511ff8cdd21d5cd27ace41d03baaef3a1c7255a2f0df320a96e3ff4b128b97dddbe5fc

  • SSDEEP

    1536:WZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAlMqqU+2bbbAV2/S2LNmHkf:wBounVyFHkMqqDL2/LgHkctc

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-03_82e5bebd466df639b9baf5ae2bc7cae2_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections