General

  • Target

    2024-02-21_1c4613f2a1922805c70e14fd53d03a79_gandcrab

  • Size

    73KB

  • MD5

    1c4613f2a1922805c70e14fd53d03a79

  • SHA1

    fb5639f4e6a0cf769c664f57052b6fe8c32a9881

  • SHA256

    05acb17054ce4b059073b1658553f169b2e3aeb889647e1eb16d7ae2bd31d9e0

  • SHA512

    fb9d0d64ab8764072bdefb42a88be717716ebf83dc7a52f0a8df12767800648e69cffea3ec11f3224469e429756c34625c5e14ac9b69f32cb336aa5d188ddb54

  • SSDEEP

    1536:v555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:wMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-21_1c4613f2a1922805c70e14fd53d03a79_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections