Overview

overview

10

Static

static

10

2024-02-22...ab.exe

windows7-x64

6

2024-02-22...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-22_7f48a615ba65d0954ace81e9eeaf9665_gandcrab

  • Size

    73KB

  • MD5

    7f48a615ba65d0954ace81e9eeaf9665

  • SHA1

    df7c8466ba5eeffc227eda32c7a907f4475438e1

  • SHA256

    696afa801db2015a7aad828659d6640cdf0c251437a4cc40a5e575e7c707ecf6

  • SHA512

    676b6130e287b261e97b953feead1b536f35f0fcc1a948494c389ab3692c340446466c86fcc0a055d1f5dc97654418df442f9a027660e4debd7b71a2708f6328

  • SSDEEP

    1536:055u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:mMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-22_7f48a615ba65d0954ace81e9eeaf9665_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections