gandcrab | 2024-06-25_b312b76b9d2c8054cc06e2a1d57ae552_gandcrab

Sharing

Target

2024-06-25_b312b76b9d2c8054cc06e2a1d57ae552_gandcrab
Size

99KB
MD5

b312b76b9d2c8054cc06e2a1d57ae552
SHA1

183ecb1aa6593f1f251211ad49741f770573a1ca
SHA256

92a04bf0adf8fc36bfc932c0d6b21dd4a3e0cd767698ad5f64b85f0740a6b9ee
SHA512

bfe533da619219e2fe05a0498c46f3cc56c23265cfefcf4af9b715baa3d306c0bfd66a2944c9f9c1c37d9560d9b565e5cd5aae427e238669983ca0eef885b8ed
SSDEEP

3072:VMSjOnrmBIMqqDL2/mr3IdE8we0Avu5r++ygLIaaypQ8CrS6:VXjOnr6jqqDL6aprYS6

Score

10^/10

Family

gandcrab

http://gdcbghvjyqy7jclk.onion.top/

Detects ransomware indicator 1 IoCs

Processes:

resource yara_rule

sample SUSP_RANSOMWARE_Indicator_Jul20
GandCrab payload 1 IoCs

Processes:

resource yara_rule

sample family_gandcrab
Gandcrab Payload 1 IoCs

Processes:

resource yara_rule

sample Gandcrab
Gandcrab family
gandcrab
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

2024-06-25_b312b76b9d2c8054cc06e2a1d57ae552_gandcrab

resource	yara_rule
sample	SUSP_RANSOMWARE_Indicator_Jul20

resource	yara_rule
sample	family_gandcrab

resource	yara_rule
sample	Gandcrab

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

resource
2024-06-25_b312b76b9d2c8054cc06e2a1d57ae552_gandcrab