General

  • Target

    2024-10-30_96c596e7be3e41bcbf4b73b4a5ed57fa_gandcrab

  • Size

    97KB

  • MD5

    96c596e7be3e41bcbf4b73b4a5ed57fa

  • SHA1

    2737d4bb8866fd7642a0d7ac666c68fde2f8312b

  • SHA256

    bfc444e74406db8de51fc82185bf511b96f3d669c42642cef7cbd3a0ab23f71b

  • SHA512

    eba32a3ba309eff8637768ce68992c51e50952859a1979e1bfbbdd76481102a9e971fd54c5f1aef83ae6216b4023d713fc9b05048d91cb397ac28883897db23d

  • SSDEEP

    1536:WZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAlMqqU+2bbbAV2/S2LNmHkf:wBounVyFHkMqqDL2/LgHkctc

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-30_96c596e7be3e41bcbf4b73b4a5ed57fa_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections