Overview

overview

10

Static

static

10

2025-01-27...ab.exe

windows10-2004-x64

10

2025-01-27...ab.exe

windows7-x64

10

2025-01-27...ab.exe

windows10-2004-x64

10

2025-01-27...ab.exe

windows10-ltsc_2021-x64

10

2025-01-27...ab.exe

windows11-21h2-x64

10

Resubmissions

25/03/2025, 15:34

250325-szwtpasjt6 10

05/02/2025, 09:28

250205-lfgr4asjcq 10

27/01/2025, 21:22

250127-z8d4kawpel 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-27_29f4c053f9521dc75671f6a6804e30a7_gandcrab

  • Size

    97KB

  • MD5

    29f4c053f9521dc75671f6a6804e30a7

  • SHA1

    7b8cb7c62001056fb1317b85dc0c7a0f8fa61755

  • SHA256

    9e0a26f7b1d5f8f23e1428c303dc23365cacb6c11b24be425d0ff42edb812522

  • SHA512

    9efee14860e3e66ad642f1a19af63c1687d7c270ba0581a893b5a56dd4c3acb7b83070571ed918749b570941351aadb33b45f4653d106235b3c643ae6adc87b0

  • SSDEEP

    1536:5ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:lBounVyFHFMqqDL2/LgHkc2

Score
10/10
upxgandcrab

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-01-27_29f4c053f9521dc75671f6a6804e30a7_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections