General

  • Target

    2024-09-14_5c259f17ab475b4465a961107a480dc1_gandcrab

  • Size

    97KB

  • MD5

    5c259f17ab475b4465a961107a480dc1

  • SHA1

    f77db03b82bdb970ca640412f0901dfabbef92d7

  • SHA256

    37141a2ebd17cd941ad1890fb38844f1d5d79145b01f2bcc50427f6de4a89214

  • SHA512

    7f77373694e6d063d69143be0fc547d517ef8a4d3614b5da8f722548c7c0e19a0bd27650bc18ba23b938ddead71e3f3f9f8005959e122521f878c3ae69888ae7

  • SSDEEP

    1536:gZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAlMqqU+2bbbAV2/S2LNmHkf:OBounVyFHkMqqDL2/LgHkctc

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-14_5c259f17ab475b4465a961107a480dc1_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections