Overview

overview

10

Static

static

10

2024-02-19...ab.exe

windows7-x64

6

2024-02-19...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-19_9a0ebc3030108a5656532b6b52e7fbd9_gandcrab

  • Size

    88KB

  • MD5

    9a0ebc3030108a5656532b6b52e7fbd9

  • SHA1

    a0ab1bb582733705530c5d6d5e955130cefb2f04

  • SHA256

    715a62f9020f2f3bb48a30b1fdbbdf87df61c1de84f9c240853b90d335a1a6e2

  • SHA512

    3fd25700b59514d2a5776b36edd896d9330e1ead7ea18d3307ffe8d8fd703b04c3bcc20fb95b9bc98b3fd34404bcd08058f11e7e7179f4ba3473109797b06164

  • SSDEEP

    1536:KrsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:KjDX9pwzMqqDL2/mr3IdE8we0Avu5r+g

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-19_9a0ebc3030108a5656532b6b52e7fbd9_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections