Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-25_ee8142a6a0ef3a993158b4dd94c78ba4_gandcrab

  • Size

    73KB

  • MD5

    ee8142a6a0ef3a993158b4dd94c78ba4

  • SHA1

    9ed9c3c1b450cb1e0c9008cc03080e6684575544

  • SHA256

    9b6fb5e66fd9ec925c78225db103e6efb4d3f1404cdcd40fc90338d311e3d2ba

  • SHA512

    1364c925656b2b83ddb8a663dd886cd992aa029dee1fbe169b750411c35e4c5345789d1a5a93fef4d4c92e333ddf9fdf811c6081f912a16c8e98d0ac5fd99d02

  • SSDEEP

    1536:u55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:kMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-25_ee8142a6a0ef3a993158b4dd94c78ba4_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.