gandcrab | extracted_at_0x21642ca[.]exe | Triage

Sharing

General

Target

extracted_at_0x21642ca.exe
Size

10.0MB
MD5

e8bf52421f8b6ec233f0b0a7caa6cb0d
SHA1

9717dc5671ef542c3c0141d0e3b14339ce1cffb0
SHA256

6e726bf697f0250a9d9f78e9ed650a1ef035ec4c4ad98605c998298f9bc5a70b
SHA512

1e635e0d64145e12bd589d191340d435420010db9c6360f3891a32418a2b9aa8851eee148dbbf07caed87ddd5fadaf2ef85bb35a5343e41abb25bf45ee2d7bba
SSDEEP

98304:pNqg0+++++++plUzCS1e0qDnorPjXI8Nuu3kvVs62C:p3FlA1O0nI8NH3kvVT2

Score

10^/10

infostealer miner gandcrab m00nd3v_logger xmrig

Malware Config

Signatures

GandCrab payload 1 IoCs

Processes:

resource yara_rule

sample family_gandcrab
Gandcrab family
gandcrab
M00nD3v Logger payload 1 IoCs
Detects M00nD3v Logger payload in memory.
infostealer

Processes:

resource yara_rule

sample m00nd3v_logger
M00nd3v_logger family
m00nd3v_logger
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig

Files

extracted_at_0x21642ca.exe