General

  • Target

    2024-02-23_1c415af4c1053beda5d9181829c02711_gandcrab

  • Size

    73KB

  • MD5

    1c415af4c1053beda5d9181829c02711

  • SHA1

    06bab1d9f9fc1a825db3658dadc5a525b2d34e61

  • SHA256

    b2c7117fb454ba8fc2d0eef42059910855f85245065bba7077b33cd0c5bbd347

  • SHA512

    865e19eefa61f9316b3bade066726165e2cc175cd9d29f1fc7747df39c886fbba5e8c339a5aef297167de34445c1bcd8efc35c0c76280c27653a72550230dc43

  • SSDEEP

    1536:8555555555555pmgSeGDjtQhnwmmB0yxMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rZ:5MSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-23_1c415af4c1053beda5d9181829c02711_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections