General

  • Target

    2024-03-28_25e345ec19e84eadb6ec826bca5821cc_gandcrab

  • Size

    73KB

  • MD5

    25e345ec19e84eadb6ec826bca5821cc

  • SHA1

    5efbbfe982ec5db5519d0975f37f7417529f443e

  • SHA256

    62f98ab3d3023041847aa3e4c5b644e3e60f48124fb3b7d5c1ee71d09ea912df

  • SHA512

    dbda89848a9e06dc7df15f44182e77bee156a83316e36e274f11c87d9ee33741ffd7d3ee6dd4196b63f76b85ccd8384110e8b02c18f57f4d1e2fd306ed2a14b0

  • SSDEEP

    1536:WgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:WMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_25e345ec19e84eadb6ec826bca5821cc_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections