General

  • Target

    2024-04-19_723d6249a9cfc328976bf113d91c819d_gandcrab

  • Size

    88KB

  • MD5

    723d6249a9cfc328976bf113d91c819d

  • SHA1

    ac93267c73694cd9b28c7ff08ffba706db579d12

  • SHA256

    f0278f07ce3264eb9b2b0d30d6939e48e9a637a83926e74b90df0708ca402a65

  • SHA512

    4218a763c52ea1e098b6e6c5a778c85bfbf9fef8fe44a7a139f55f2f2da3cf810efbb1628c7aea3258fa6c4f23275d22e4873f3207c8aedc3462c63835e1f22c

  • SSDEEP

    1536:4rsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:4jDX9pwzMqqDL2/mr3IdE8we0Avu5r+g

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-19_723d6249a9cfc328976bf113d91c819d_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections