General

  • Target

    b1841d74fadb248b93948a491cd246f806f5d54eb9c86f7f4f39dea7f171d43d.exe

  • Size

    240KB

  • MD5

    13e954a87528e640b5b07ecb7b734c2a

  • SHA1

    f56431bb6a91fdb107765e9e5c3fea3bf48759e8

  • SHA256

    b1841d74fadb248b93948a491cd246f806f5d54eb9c86f7f4f39dea7f171d43d

  • SHA512

    49453814223d89e890db7d5255073f045014302f3acd79e043f80c12e56b076d473f904bb48030770fe198dd248ed1b193115d8e552868fe622c1c98cd509dcd

  • SSDEEP

    3072:YYHVHd2NwMqqDL2/mr3IdE8we0Avu5r++ygLIaa4jRv9OtNZpHkE:YycqqDL6oREzZpEE

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b1841d74fadb248b93948a491cd246f806f5d54eb9c86f7f4f39dea7f171d43d.exe
    .exe windows:5 windows x86 arch:x86

    54ebe2f0f5d3311566fc8e52da85b6aa


    Headers

    Imports

    Sections