Overview

overview

10

Static

static

10

2024-03-25...ab.exe

windows7-x64

6

2024-03-25...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-25_c57f0e5b8065086fca12d6f73fb26199_gandcrab

  • Size

    88KB

  • MD5

    c57f0e5b8065086fca12d6f73fb26199

  • SHA1

    0dac71dd0a4175b84d94140effe9040659b5489f

  • SHA256

    95ea2b37220108dafee7f0ee3ccdb97837fe52a24dfc51983818280ee98d5fc6

  • SHA512

    2669488bbb6df1591ae25ba291cf774ce9a7fe35d560f20fb09cb9c538c065d76eceba5a1dbeffda8be9aafa80e1c5492b12d7c2c9c98ada235151642fcb52ae

  • SSDEEP

    1536:NrsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:NjDX9pwzMqqDL2/mr3IdE8we0Avu5r+g

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-25_c57f0e5b8065086fca12d6f73fb26199_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections