Overview

overview

10

Static

static

10

2024-01-18...ab.exe

windows7-x64

6

2024-01-18...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-18_b9ce91467a61d6d9e3dc3e48627c4708_gandcrab

  • Size

    83KB

  • MD5

    b9ce91467a61d6d9e3dc3e48627c4708

  • SHA1

    2fda519efb605dce7a35a98aee4498ae2df39bca

  • SHA256

    2aa8d02661ed6bbd2a4a2a90b3a12bf2d8de77f94deb3788da38a1cce053fc90

  • SHA512

    9c109a8fe5a87062d62d41d4d2d80195a75f1435adff3a3f93c3c805720ed4739b81f20bedcbc2fff46131f0201fe9b2783ab2d92f9b44c23eeb3fbe333a8d10

  • SSDEEP

    1536:X55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:TMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-18_b9ce91467a61d6d9e3dc3e48627c4708_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections