General

  • Target

    2024-03-27_7ee50fd4b1ea89c9ee0e7dc5c3724750_gandcrab

  • Size

    83KB

  • MD5

    7ee50fd4b1ea89c9ee0e7dc5c3724750

  • SHA1

    87eea1d18414141d089ed660269320c903878f24

  • SHA256

    05ff2d7dc8b75fd79342e4b2641e4b356f4c061a1a138e9a085801f6cada1d9f

  • SHA512

    20540ff5d00d9de8722ae65529142edb06b65e1fbd960ab1d76c047a423c4e3297510a8c761f46c02588fef73d8750258eed83e3c4100c63f0f114e57351e59c

  • SSDEEP

    1536:X55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:TMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_7ee50fd4b1ea89c9ee0e7dc5c3724750_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections