General

  • Target

    2024-04-21_da833855cee682ee96df4cd1e42163b1_gandcrab

  • Size

    88KB

  • MD5

    da833855cee682ee96df4cd1e42163b1

  • SHA1

    3b014121c549f0152da71715a5b4df80b91cd92c

  • SHA256

    cbc4ea35fbfd2945e41dfe1f2227c4f2e94f7519821b657bc8dc82ce9a4ce070

  • SHA512

    4bfcf348f4a1f676a688a7270a84f7e1756c043c274c35d99d8c011792df43c9df846ef9b54bd89de5f2fdbd4447d04418b83a739ccfc116ebd79cd40f038999

  • SSDEEP

    1536:LrsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:LjDX9pwzMqqDL2/mr3IdE8we0Avu5r+g

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-21_da833855cee682ee96df4cd1e42163b1_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections