Overview

overview

10

Static

static

10

2024-03-28...ab.exe

windows7-x64

6

2024-03-28...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-28_adeec5d6c7882e67db13fed98f0c64c3_gandcrab

  • Size

    83KB

  • MD5

    adeec5d6c7882e67db13fed98f0c64c3

  • SHA1

    e3b738e9d8eb73674b74d3d97bcbfb6f75db79fe

  • SHA256

    fc4d043affc397bdaeed17f99b39b42c6545753277dc7899bc8fbd4559823ab9

  • SHA512

    c6d4b00d268eaaaf3c34b2c70fa16f49819cc6a1242462cc4cf9cf38ecb405f05fb2696df77ee96b13d90face341675807c61165b5b409ca1d2b0699f13bb18c

  • SSDEEP

    1536:P55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:7MSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_adeec5d6c7882e67db13fed98f0c64c3_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections