gandcrab | 2024-06-20_1967cda21d6cdb6830eede4ab6077a85_gandcrab

Sharing

Target

2024-06-20_1967cda21d6cdb6830eede4ab6077a85_gandcrab
Size

99KB
MD5

1967cda21d6cdb6830eede4ab6077a85
SHA1

178202542bd7a43c51da5d3ebcc5661cf338040c
SHA256

937c6c1673d1f1db9a5da93fa7497b38f5f733fc7a79f6d26a4fecf2af101329
SHA512

bc4bf0b5fc8bbff6173862c80bbeb04bc1789772d1956e70ac643f6ec0a123fb794400bc056d86130338eb6923ce3f32c7e93d24dc99543de483cb4dc8cb72f3
SSDEEP

3072:jMSjOnrmBIMqqDL2/mr3IdE8we0Avu5r++ygLIaaypQ8CrS6:jXjOnr6jqqDL6aprYS6

Score

10^/10

Family

gandcrab

http://gdcbghvjyqy7jclk.onion.top/

Detects ransomware indicator 1 IoCs

Processes:

resource yara_rule

sample SUSP_RANSOMWARE_Indicator_Jul20
GandCrab payload 1 IoCs

Processes:

resource yara_rule

sample family_gandcrab
Gandcrab Payload 1 IoCs

Processes:

resource yara_rule

sample Gandcrab
Gandcrab family
gandcrab
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

2024-06-20_1967cda21d6cdb6830eede4ab6077a85_gandcrab

resource	yara_rule
sample	SUSP_RANSOMWARE_Indicator_Jul20

resource	yara_rule
sample	family_gandcrab

resource	yara_rule
sample	Gandcrab

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

resource
2024-06-20_1967cda21d6cdb6830eede4ab6077a85_gandcrab