gandcrab | 2024-11-23_e2a09a09f0fa4d13dd3fe8886f40a089_gandcrab

General

Target

2024-11-23_e2a09a09f0fa4d13dd3fe8886f40a089_gandcrab
Size

167KB
MD5

e2a09a09f0fa4d13dd3fe8886f40a089
SHA1

1d86f84cd12514c935c4964819431124e1174ff6
SHA256

7536afd9f5d7fafc5e3ac64f5911737b8438a73f499d991f2959eae41930e23c
SHA512

b0936942b0b4b6ddca459f7f553d9e6967017aec8bc92ae16a3f78cd15d5cb1a037eedce15eae455774b6dabb9c55d0aed01adfb6a89f0ed723a29511ebc0da2
SSDEEP

3072:GYHVHd2NpMqqDL2/mr3IdE8we0Avu5r++ygLIaa4jRv9OtNZpek:GyRqqDL6oREzZpl

Score

10^/10

upx gandcrab

GandCrab payload 1 IoCs

Processes:

resource yara_rule

sample family_gandcrab
Gandcrab family
gandcrab
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_gandcrab

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-11-23_e2a09a09f0fa4d13dd3fe8886f40a089_gandcrab