General

  • Target

    2024-02-29_19e45a74fe0bbc7dea830fb4cb52e28f_gandcrab

  • Size

    73KB

  • MD5

    19e45a74fe0bbc7dea830fb4cb52e28f

  • SHA1

    61aa4cf8b1a1af2c65088adde85ba87504b5aeb5

  • SHA256

    b1fe80e8719f732b06335f0782d45c414e6f1eafd08fed3228ae725607ae154e

  • SHA512

    e4c80d77fc177da4faa776925e85345dc1cdd26ce161a7ff19b607c152a4cecd01b9bfc73c887b3e31542f453f41691103126b331ab3777ef4600a574e46e8ee

  • SSDEEP

    1536:A555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:9MSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-29_19e45a74fe0bbc7dea830fb4cb52e28f_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections