Overview

overview

10

Static

static

10

2024-03-14...ab.exe

windows7-x64

6

2024-03-14...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-14_3029f8401e1dcb80b4dadbc2957a4c5c_gandcrab

  • Size

    83KB

  • MD5

    3029f8401e1dcb80b4dadbc2957a4c5c

  • SHA1

    3513c500b5e037ccb40e2f67ad4bf7f9c5cc9dfd

  • SHA256

    58fc3b71ca6fc0781b3e4deab532303684a21034fc84f76f424566db4a460990

  • SHA512

    de9b0b0fdb081c1fdbf3cce38379984d81c290ad8cf2e130e5e8adedb3d09030914e17c3bf4d35b1d8f8771b6f7326c5248bb585c4ff61ef44b22f3b65f53aab

  • SSDEEP

    1536:/55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:LMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-14_3029f8401e1dcb80b4dadbc2957a4c5c_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections