gandcrab | a4cc04b75114159578ac54201071cd4233df9c23a3fac8e00d8b32478b62cefd | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

69ef7206f9...ex.exe

windows7-x64

69ef7206f9...ex.exe

windows10-2004-x64

Sharing

General

Target

69ef7206f9d2c4exeexeexeex.exe
Size

160KB
Sample

230708-wlly4shh3w
MD5

69ef7206f9d2c47a5c179a38ccf474d4
SHA1

856cd00dd6ac46d68b3c429a0751b5ba58ea2efd
SHA256

a4cc04b75114159578ac54201071cd4233df9c23a3fac8e00d8b32478b62cefd
SHA512

5359e451ee8d0d1692c694750d398c33e3dd83835698884e4ea345d8d7acaa9326d71d23276f0257f05e32bb9c951516c7a4a91d427fd6e34c98d2b5f0289f81
SSDEEP

3072:qYHVHd2NIMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdENoH00yWOtx:qyEqqDL64vdlTuj

Score

10^/10

gandcrab backdoor ransomware

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

69ef7206f9d2c4exeexeexeex.exe

Resource

win7-20230703-en

gandcrab backdoor ransomware

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

69ef7206f9d2c4exeexeexeex.exe

Resource

win10v2004-20230703-en

gandcrab backdoor ransomware

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  69ef7206f9d2c4exeexeexeex.exe
- Size
  
  160KB
- MD5
  
  69ef7206f9d2c47a5c179a38ccf474d4
- SHA1
  
  856cd00dd6ac46d68b3c429a0751b5ba58ea2efd
- SHA256
  
  a4cc04b75114159578ac54201071cd4233df9c23a3fac8e00d8b32478b62cefd
- SHA512
  
  5359e451ee8d0d1692c694750d398c33e3dd83835698884e4ea345d8d7acaa9326d71d23276f0257f05e32bb9c951516c7a4a91d427fd6e34c98d2b5f0289f81
- SSDEEP
  
  3072:qYHVHd2NIMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdENoH00yWOtx:qyEqqDL64vdlTuj
Score

10^/10

gandcrab backdoor ransomware
- GandCrab payload
- Gandcrab
  Gandcrab is a Trojan horse that encrypts files on a computer.
  ransomware backdoor gandcrab
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gandcrabbackdoorransomware

behavioral2

gandcrabbackdoorransomware

© 2018-2025

Terms | Privacy