Overview

overview

10

Static

static

10

2024-03-16...ab.exe

windows7-x64

6

2024-03-16...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-16_b56ff368dc90a47daf904f5769e99c84_gandcrab

  • Size

    88KB

  • MD5

    b56ff368dc90a47daf904f5769e99c84

  • SHA1

    284604ae62e208807ebb5d92d8121a1f67be80a8

  • SHA256

    6df88612aacffc2f5c8938fade902ca6f058c8117a14ff9f83dda7a559266f5f

  • SHA512

    c0eb9b1fbd5304c840792153c431893300af3b2e55f8d5514c52544925f311bd550b2236bf087d9830d6fba38468152683a05ccd44d59c874f76d7ac530fba64

  • SSDEEP

    1536:TrsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:TjDX9pwzMqqDL2/mr3IdE8we0Avu5r+g

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-16_b56ff368dc90a47daf904f5769e99c84_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections