General

  • Target

    2024-03-27_1310f56bf38f818dfbb78745c31d7531_gandcrab

  • Size

    73KB

  • MD5

    1310f56bf38f818dfbb78745c31d7531

  • SHA1

    fc466dccdb9741f8c84677791556560c7bbaa0d2

  • SHA256

    93857a0dbcbf767fa4abeda7d96b1e485eb7538e16e30a695be1e73771720f53

  • SHA512

    da0653f8b10d1e71d94171a884dab108aac20f51312ee1d971fb67de3143d71e14bf307683a14a357f302ab845c331597013ad7185fac423d8b19d0fc43a3fd3

  • SSDEEP

    1536:N55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:lMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_1310f56bf38f818dfbb78745c31d7531_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections