General

  • Target

    2024-01-18_b515bf4ef9e487e576a586694e21adb3_gandcrab

  • Size

    73KB

  • MD5

    b515bf4ef9e487e576a586694e21adb3

  • SHA1

    d7717f2a6b8266c87c667adf8c2b2fce0322aa06

  • SHA256

    f783d1f31a37add5cd57c274a952b4110d6e9c33f87b45b0288cf161e48b77cd

  • SHA512

    39b98fc9070c4741b0add8e0aba89e847c263588c966c6d0cb14c2208a5eed4e017ad31f9e54c95e865778ae842dfa3e031111a70e0f3b4c66b0455c5041ab06

  • SSDEEP

    1536:555u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:RMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-18_b515bf4ef9e487e576a586694e21adb3_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections