Overview

overview

10

Static

static

10

2024-04-08...ab.exe

windows7-x64

6

2024-04-08...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-08_55506540d948eee4a46fa6e4933a6815_gandcrab

  • Size

    73KB

  • MD5

    55506540d948eee4a46fa6e4933a6815

  • SHA1

    d18f44c6591a3c32a4173cbce59ba28c38c338be

  • SHA256

    0e0645e00bb9a32df0df806f57ff61d0b40699c3eb105b9c86270f079add2abe

  • SHA512

    0cf0ae74434fcbefcd28d771489eb0348a11dce9463e7a0c99895f51bca4d53e9c4695b7bd9dc625fd47926ea835bac9614ebb9295de4a298f7cdf70d80f4267

  • SSDEEP

    1536:p55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:hMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-08_55506540d948eee4a46fa6e4933a6815_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections