General

  • Target

    2024-04-19_5e707517fc5de3a22a7bdebdb26def34_gandcrab

  • Size

    73KB

  • MD5

    5e707517fc5de3a22a7bdebdb26def34

  • SHA1

    7e693b0394a999e6084e141512e91fa8f69cb72d

  • SHA256

    ecda6d1023692a475e5e4f935dfa7d40d851ee7e4a475023ab2e2017e8e845f0

  • SHA512

    cc3fca765a335799271f11ea35714b108f75b0479fb58478572077f065ac4b44bdb7704a863bd3dd2626d5750cf512e1d8f67f8afba963657b881df9ec6111ce

  • SSDEEP

    1536:3555555555555pmgSeGDjtQhnwmmB0yRMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r2:YMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-19_5e707517fc5de3a22a7bdebdb26def34_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections