gandcrab | 63b48c7c22e4f22966d34b0c25efdec2f3c961de1b4f9df0d56adfa852079d23 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

95c483c93d...ex.exe

windows7-x64

95c483c93d...ex.exe

windows10-2004-x64

Sharing

General

Target

95c483c93d60aaexeexeexeex.exe
Size

160KB
Sample

230709-xxpptafd29
MD5

95c483c93d60aa940099a72a084369fd
SHA1

83496912054689127413729f994c2ddacdeea483
SHA256

63b48c7c22e4f22966d34b0c25efdec2f3c961de1b4f9df0d56adfa852079d23
SHA512

51f9878860f98a19c41d4756844eca7d9ab46cb3016f656ac593b0c6c9b68a3d453a4bd417f203f55a63b28762b119a1c2ab1c7f17372e8b417e5967e596276c
SSDEEP

3072:UYHVHd2NIMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdzQoHT0y9U:UyEqqDL64vdnIP

Score

10^/10

gandcrab backdoor ransomware

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

95c483c93d60aaexeexeexeex.exe

Resource

win7-20230703-en

gandcrab backdoor ransomware

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

95c483c93d60aaexeexeexeex.exe

Resource

win10v2004-20230703-en

gandcrab backdoor ransomware

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  95c483c93d60aaexeexeexeex.exe
- Size
  
  160KB
- MD5
  
  95c483c93d60aa940099a72a084369fd
- SHA1
  
  83496912054689127413729f994c2ddacdeea483
- SHA256
  
  63b48c7c22e4f22966d34b0c25efdec2f3c961de1b4f9df0d56adfa852079d23
- SHA512
  
  51f9878860f98a19c41d4756844eca7d9ab46cb3016f656ac593b0c6c9b68a3d453a4bd417f203f55a63b28762b119a1c2ab1c7f17372e8b417e5967e596276c
- SSDEEP
  
  3072:UYHVHd2NIMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdzQoHT0y9U:UyEqqDL64vdnIP
Score

10^/10

gandcrab backdoor ransomware
- GandCrab payload
- Gandcrab
  Gandcrab is a Trojan horse that encrypts files on a computer.
  ransomware backdoor gandcrab
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gandcrabbackdoorransomware

behavioral2

gandcrabbackdoorransomware

© 2018-2025

Terms | Privacy