gandcrab | 2024-11-23_60fa7ccb528b157f1b3db7e0eae32a9d_gandcrab

General

Target

2024-11-23_60fa7ccb528b157f1b3db7e0eae32a9d_gandcrab
Size

90KB
MD5

60fa7ccb528b157f1b3db7e0eae32a9d
SHA1

2ab12112f2eb4c2ebd21e9073928eaffc251c9dc
SHA256

937935fb587e9719c81a81daa19191dfb334b61b3bf9a0febc49cc3a1e6ef6e4
SHA512

1f0e05d7d3317525861b86ab85757b01bcf332f7aa6a6b33b8b441ae63036fb5376f8bebfb3228e5014cffcf39d8ac5a07307f391c4fbf5c40a4c91bbb056033
SSDEEP

1536:6V55u555555555pmgSCHVHdMXNIy0MqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++y1:aYHVHd2NwMqqDL2/mr3IdE8we0Avu5r0

Score

10^/10

upx gandcrab

GandCrab payload 1 IoCs

Processes:

resource yara_rule

sample family_gandcrab
Gandcrab family
gandcrab
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_gandcrab

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-11-23_60fa7ccb528b157f1b3db7e0eae32a9d_gandcrab