Overview

overview

10

Static

static

10

2024-02-12...ab.exe

windows7-x64

6

2024-02-12...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-12_5075322b4df3d91ab3d9a31777d5dbfe_gandcrab

  • Size

    88KB

  • MD5

    5075322b4df3d91ab3d9a31777d5dbfe

  • SHA1

    2c8d0f31a19079f5c3614fe98ccc243e16544344

  • SHA256

    fb56f78a5e16bc30a582d2e714f87f81ea488f29ae2a7e01a290722b1dca0dc7

  • SHA512

    a9c0d3f079f218ee4d6e9798cc3082db3b7bc8c7f1a395381e798aa7c2c3a8ad0e0d882bd592377c8ce4cf455c169123c4945fd1da655dc6fcc53836b4f530ce

  • SSDEEP

    1536:LrsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:LjDX9pwzMqqDL2/mr3IdE8we0Avu5r+g

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-12_5075322b4df3d91ab3d9a31777d5dbfe_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections