Overview

overview

10

Static

static

10

2024-03-25...ab.exe

windows7-x64

6

2024-03-25...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-25_7784396259e6af73a8cf3f1184b86150_gandcrab

  • Size

    73KB

  • MD5

    7784396259e6af73a8cf3f1184b86150

  • SHA1

    dfffa4457b6d9b32266cc1d873efa40847f6c7a5

  • SHA256

    d1d3cffeb2aeabcc8a0176272fefcca00c966619e8f389bc69ac1c57a0f44572

  • SHA512

    103eb42db4942c16576807c70fa7fa2773fdd744599ec17ae72f7a2e084823183222727aad84db60bdc51f69f00d20515d153472d055dd9e74d478a1063f76e3

  • SSDEEP

    1536:N555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:qMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-25_7784396259e6af73a8cf3f1184b86150_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections