General

  • Target

    2024-07-01_1d1629b769493dd7fa52f6e2d47f0a1f_gandcrab

  • Size

    97KB

  • MD5

    1d1629b769493dd7fa52f6e2d47f0a1f

  • SHA1

    6021f560d02b3ea4b05d9ff21296c56dfc291651

  • SHA256

    77041f8b4289b81c84af9949684b1183ffa2e9bde0449b6f0eb89b303fdf9e0a

  • SHA512

    22c5a54f07dcbf473e6e672a5ce4c257c971b15a75bfdca04c2ed257509991c312cba02d5e14b87fae28e7f245552712a7228c3b90756cc0ef84d09c5ab8f391

  • SSDEEP

    1536:/ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAlMqqU+2bbbAV2/S2LNmHkf:XBounVyFHkMqqDL2/LgHkctc

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-07-01_1d1629b769493dd7fa52f6e2d47f0a1f_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections