General

  • Target

    2024-11-18_06bb3e26f98fd902f3f023c5bedb1850_gandcrab

  • Size

    240KB

  • MD5

    06bb3e26f98fd902f3f023c5bedb1850

  • SHA1

    bacd24ac09f24a8102e78e56bc1b8c33b103d6a5

  • SHA256

    1be6d76ab1f5d4fa2c72a2df61ac1ba2dd99ae5911b9eb25e599cba8e9ec1500

  • SHA512

    37441a65c36916ef40b8a2e79bf935ee9abd8a08fef43b3dbdd5a404c0d78297edbcfe33eb40624de306a155a1be16b1c729c71f30f1324131cffc3c2cd987d2

  • SSDEEP

    3072:LYHVHd2NwMqqDL2/mr3IdE8we0Avu5r++ygLIaa4jRv9OtNZpHk:LycqqDL6oREzZpE

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-11-18_06bb3e26f98fd902f3f023c5bedb1850_gandcrab
    .exe windows:5 windows x86 arch:x86

    54ebe2f0f5d3311566fc8e52da85b6aa


    Headers

    Imports

    Sections