Overview

overview

10

Static

static

10

2024-04-04...ab.exe

windows7-x64

6

2024-04-04...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-04_e5fe35f47c5e392a1ff28b9de23d477c_gandcrab

  • Size

    73KB

  • MD5

    e5fe35f47c5e392a1ff28b9de23d477c

  • SHA1

    0188ad80bcde2b0f3d295a18ea62bb550147bbd8

  • SHA256

    4fbc9a4c56f94f2013a813436eb19c0f86b0eb46b4ea3d048a14183eeaacbddd

  • SHA512

    c51bf01c3ebfffad1a9af741e3da68a0f07c8c94cee1f2e641280c270dc7acfa8ad5c2631f24c6bf608673149b8de49d271f08ca48107f81eba4fee56ea5a685

  • SSDEEP

    1536:u55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:kMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-04_e5fe35f47c5e392a1ff28b9de23d477c_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections