General

  • Target

    2024-02-20_9fc9f6daac9f149d897bc4cdd445c955_gandcrab

  • Size

    73KB

  • MD5

    9fc9f6daac9f149d897bc4cdd445c955

  • SHA1

    61b5028da0533d3c145872e29df38a9a9e11dd90

  • SHA256

    a9107972a3530a4cecb0af99820277e96cbaf560042c4564ddebb9cf71ad1f36

  • SHA512

    f4a6ab7a1c7f7607e3ce1bc3b59ba084b45d6807b3b7103731b9249d4e1d73c5d2e998b02b72eb39b7c2af76844d1e44352bc3395a0a4faa80a50b2a8ec1b416

  • SSDEEP

    1536:U55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:GMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-20_9fc9f6daac9f149d897bc4cdd445c955_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections