General

  • Target

    2024-10-30_45c680d5f07b5d184a97c042a0461605_gandcrab

  • Size

    97KB

  • MD5

    45c680d5f07b5d184a97c042a0461605

  • SHA1

    3b6638615c3b67abe80b3e5ddfea06ba20ba0915

  • SHA256

    17fc51b53242102eed7d156aa9978ce6678d9fd45e7df3f317b0833613317790

  • SHA512

    bb184ee6c27899d423fc866c679fd3f0f6f7d30bfecf33b5539c707962555514d33d59ec1e4467bccddcadc5dca05fe96b1f512dd8d5d4816b63e66ad8b25ae1

  • SSDEEP

    1536:qZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAlMqqU+2bbbAV2/S2LNmHkf:cBounVyFHkMqqDL2/LgHkctc

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-30_45c680d5f07b5d184a97c042a0461605_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections