Overview

overview

10

Static

static

10

2024-01-27...ab.exe

windows7-x64

6

2024-01-27...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-27_bd94d7fcf0232ec5949b28470a42c8d2_gandcrab

  • Size

    73KB

  • MD5

    bd94d7fcf0232ec5949b28470a42c8d2

  • SHA1

    d49dc3e8f3fc9eea2cc8120abce4b389757adde3

  • SHA256

    9c55f2afbd9be2016230cc92fe6a2446d3dbcfe235961308f2a3e242189497f3

  • SHA512

    4c533b9fed14ac14fd30c96aa0eb8d117c92da4c774fc4f40c63685e7a9a3b8d3f60aff82c06608ba9bbae3b7a30049fff8449c3ab5b4b8e8af60d87369ff2d0

  • SSDEEP

    1536:/55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:LMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-27_bd94d7fcf0232ec5949b28470a42c8d2_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections