General

  • Target

    2024-04-19_7c0280d8350e42fb37b440f04e2854f0_gandcrab

  • Size

    88KB

  • MD5

    7c0280d8350e42fb37b440f04e2854f0

  • SHA1

    78ecde1d02ac0e0c8b73395d8047d16d9e35faab

  • SHA256

    d72814868c3b546844e2b97ecca24fad711c19ba92411690e00a595121e2784e

  • SHA512

    1cc7c5d997f302007c99c972675278ab5262216dcfdac2a40b2a39e5a7b1806d4460d6ea45fa3cfcc550ef112ec70a00d62580667af05290990d0cdeb21a753e

  • SSDEEP

    1536:ersWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:ejDX9pwzMqqDL2/mr3IdE8we0Avu5r+g

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-19_7c0280d8350e42fb37b440f04e2854f0_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections