General

  • Target

    2024-01-24_46b09d8cbf2ef4ddd76d7fc95dae62f6_gandcrab

  • Size

    73KB

  • MD5

    46b09d8cbf2ef4ddd76d7fc95dae62f6

  • SHA1

    3a84dbaed1baab502836bc0f43f68e28f613e7b5

  • SHA256

    0cc3a136209cd7b23260f07b98a751b5c56915ac143b929d1f1ae69e4f493cdd

  • SHA512

    69aa8a454efd98c30465b727bda7e2cbd7a0d5dbd91d8858258ed68498acc11cec9c35bf60142f8cd687873bb16026a6ab05ed55ad658ef742dd5d55c44714ae

  • SSDEEP

    1536:+gSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:+MSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-24_46b09d8cbf2ef4ddd76d7fc95dae62f6_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections