Overview

overview

10

Static

static

10

2024-03-13...ab.exe

windows7-x64

6

2024-03-13...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-13_59f095b102b08d760ad6a27bba5c7475_gandcrab

  • Size

    73KB

  • MD5

    59f095b102b08d760ad6a27bba5c7475

  • SHA1

    eb9a129cf6f6d21e6680e135b9d5ad0ef521552e

  • SHA256

    183a4b625ee30fc9a0f46a3410bd6f2505ab851e3bced14704df8ccfe8066a01

  • SHA512

    5bf00d37a987932497a4b3f3a3c98709f935b2616107c1fc43d7a26c44a4aa376db6dbe0393819f6877981ee5119342f2e84fb4a5d717731259ffba88454d965

  • SSDEEP

    1536:8555555555555pmgSeGDjtQhnwmmB0yYMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rx:5MSjOnrmBAMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-13_59f095b102b08d760ad6a27bba5c7475_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections