Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-17_2d1c7260da6f6fd288ec8f2f395fdd1b_gandcrab

  • Size

    73KB

  • MD5

    2d1c7260da6f6fd288ec8f2f395fdd1b

  • SHA1

    dff2c572ab69a0dde5548d89f94b471e32e078e9

  • SHA256

    d47e9cc780acdfd67051b9be6efa705b4e213eb5176b4fb218e73806f6630299

  • SHA512

    7d0955cebc518692ae1c05e414deecb833b69c898e5a398d6124f9e954059c31f86fe8631dfd906a3778c5b474dc93f41130855d4899005598ede696e6fe41bc

  • SSDEEP

    1536:G55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:sMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-17_2d1c7260da6f6fd288ec8f2f395fdd1b_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.