General

  • Target

    2024-01-27_7de1be064925e5866803a7530dc5b6ed_gandcrab

  • Size

    73KB

  • MD5

    7de1be064925e5866803a7530dc5b6ed

  • SHA1

    6f92f9595b85a7482341e7cf0069b97cf88d55da

  • SHA256

    418b9013e97f86f05c1f30a8e1768e4f80e2850eb582d5097f7623db66934fe4

  • SHA512

    69afe8712737483e9a585f8ee65fe2dd01626e5b0ddf53b3bfc64cbca9395f035bf06094789a688f35285165ef5c00b96783cf89bd34497e1469be5ec7146228

  • SSDEEP

    1536:A555555555555pmgSeGDjtQhnwmmB0yYMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rx:9MSjOnrmBAMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-27_7de1be064925e5866803a7530dc5b6ed_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections