General

  • Target

    2024-02-01_c90a7c990bb773af15e8f8b963516e0f_gandcrab

  • Size

    74KB

  • MD5

    c90a7c990bb773af15e8f8b963516e0f

  • SHA1

    2fc146d300fb71384d2f38d2c1aaee2d467be532

  • SHA256

    e84322848bc5ea50bd85796faabe90e6ef12b75e3671ea858fc1e6e7089a1b78

  • SHA512

    f868f02ae8f035cc070267be7ffe26a0ec98dd954502c23d47f954b76a185994c159413b46f78a852c65432d74c2f0b42e41d3eec6b36a2afa559e9d6314d570

  • SSDEEP

    1536:Q55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rN:iMSjOnrmBTMqqDL2/mr3IdE8we0Avu5x

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-01_c90a7c990bb773af15e8f8b963516e0f_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections