General

  • Target

    2024-11-17_397b9af324512eeb6a86d2964376d335_gandcrab

  • Size

    240KB

  • MD5

    397b9af324512eeb6a86d2964376d335

  • SHA1

    bad975b221cc8ee2ffb1351a8855f084d4e11fcd

  • SHA256

    a79efce9b540b027508f67208762cba00643d2980ac34b57714d522e410c2b34

  • SHA512

    16da96e27a8cfd77f733acde1a532cb1b42fb3b32db57d3d5e65f81cdaa1a24a9c7a20d80d99ffe68691a2a6eedc374c2351cb72a5ae3e7691931832142b8dbf

  • SSDEEP

    3072:SYHVHd2NwMqqDL2/mr3IdE8we0Avu5r++ygLIaa4jRv9OtNZpHk:SycqqDL6oREzZpE

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-11-17_397b9af324512eeb6a86d2964376d335_gandcrab
    .exe windows:5 windows x86 arch:x86

    54ebe2f0f5d3311566fc8e52da85b6aa


    Headers

    Imports

    Sections