Overview

overview

10

Static

static

10

2024-02-12...ab.exe

windows7-x64

6

2024-02-12...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-12_5d3544c6e4d6ad2bd8b0e1d955d9c918_gandcrab

  • Size

    73KB

  • MD5

    5d3544c6e4d6ad2bd8b0e1d955d9c918

  • SHA1

    f3c05470e8fce5569a362fc54ba22d1b6efce361

  • SHA256

    85229446cb510de9bc9bcfafd5d9bc240adb67eb5ecc3d4395f25b83b48eadf4

  • SHA512

    d62c8b481475b7fd215a5fbab9e88597b96e0ca5fad98567694c627b9575f194959553855aaf0eb4d11adc03e7c811e60acd42b92d5dc5f2535e455452e6edee

  • SSDEEP

    1536:g55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:SMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-12_5d3544c6e4d6ad2bd8b0e1d955d9c918_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections