Overview

overview

10

Static

static

10

2024-09-14...ab.exe

windows7-x64

10

2024-09-14...ab.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-09-14_17d16a32ea36a80e5f7801ba696cbdcc_gandcrab

  • Size

    97KB

  • MD5

    17d16a32ea36a80e5f7801ba696cbdcc

  • SHA1

    872e787c9bb5d62a10e27d12a7f376a71777ad3b

  • SHA256

    4f9665f4d567689cd853e1ddd569c2ca6ef01c9d00e8c0024b7157fe9e1b1f34

  • SHA512

    139a9a2e44f978c5934ce21fa341d8126bdd3240cc795c32225019c398c7ecebf48868f2552358058b52388257e5fbfdd1ed7376b3c2d3f4e6719cf70d9cfdfd

  • SSDEEP

    1536:WZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAlMqqU+2bbbAV2/S2LNmHkf:wBounVyFHkMqqDL2/LgHkctc

Score
10/10
upxgandcrab

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-14_17d16a32ea36a80e5f7801ba696cbdcc_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections