General

  • Target

    2024-02-03_a90776e0c6eaaf36f8bf4144950c7424_gandcrab

  • Size

    73KB

  • MD5

    a90776e0c6eaaf36f8bf4144950c7424

  • SHA1

    7e0d7fee26ef7665ca06a91d7497ea6f43e8812e

  • SHA256

    546ad62bf9d3b8eba29044f861964dc72df33f3e7398db8025310ea7ccf13ee6

  • SHA512

    a49237fa3f9635091d2a5fee677d85bf4b9a31a929554d7c45b9e001dc8327f641222a00dc9572d879aa2bf586725731ccd8147114c77003f9f6a7a5020bbfd3

  • SSDEEP

    1536:S555555555555pmgSeGDjtQhnwmmB0yxMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rZ:DMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-03_a90776e0c6eaaf36f8bf4144950c7424_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections