General

  • Target

    2024-11-19_5de93d52e567c0a4827e60c8e30d7fbf_gandcrab

  • Size

    97KB

  • MD5

    5de93d52e567c0a4827e60c8e30d7fbf

  • SHA1

    d37eb95416d95049c95c96bfbe7ea75514b7cb04

  • SHA256

    0b9ed6ffe026b1172a3c86b12e7b00cac1f8ce421b89a274e59795aff7c33259

  • SHA512

    44da3b7c28f203dc0ed242ce09f42a843c1f304db9756aeb9cdfd7b4130cbe137a4fd3fd19281dbe9ed314be21639d613f1e6a6744f4520f9a798c55b150e289

  • SSDEEP

    1536:oZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAlMqqU+2bbbAV2/S2LNmHkf:mBounVyFHkMqqDL2/LgHkctc

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-11-19_5de93d52e567c0a4827e60c8e30d7fbf_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections