Overview

overview

10

Static

static

10

2024-03-15...ab.exe

windows7-x64

6

2024-03-15...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-15_24cd20905b1eda4b4d6403802e0ec3ca_gandcrab

  • Size

    73KB

  • MD5

    24cd20905b1eda4b4d6403802e0ec3ca

  • SHA1

    1e803a7347dfbf3a2585274173424fd7c53c2897

  • SHA256

    8e0da50333a91a0edfea92ec29cd210ce1958cb88363330d02889b23dbbbaf0a

  • SHA512

    ba323731b60e2c8a76d26553bad1b5e75cc15decb666401f8ee8f1ed5c9df37f2ef9cdb840b1393273fe9828ce55fa9b0ece1fa87763ad57763a61d0be7a0eee

  • SSDEEP

    1536:p555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:WMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-15_24cd20905b1eda4b4d6403802e0ec3ca_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections