General

  • Target

    2025-04-09_0f0b287d0fe9c2f1551e0e3b39140b59_gandcrab

  • Size

    97KB

  • MD5

    0f0b287d0fe9c2f1551e0e3b39140b59

  • SHA1

    b37adfa740e2d58dc3a5f76e962b9eff189291b4

  • SHA256

    b9056f09c97f8f861a2c184c2ad1f81106a5dfaa82b1473cfd8a98fd0da7e0db

  • SHA512

    62385603808cb18645b88d326ffd48f0ec49ca591052bc2ec97c6a0affa689e9a163d637633ec44274a81a235149776e9341af20f8a98c94a986586a8846e8b5

  • SSDEEP

    1536:nZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:vBounVyFHFMqqDL2/LgHkc2

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-09_0f0b287d0fe9c2f1551e0e3b39140b59_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections