Overview

overview

10

Static

static

10

2024-04-27...ab.exe

windows7-x64

6

2024-04-27...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-27_d2184d764de9750ec633a11bbeae03d6_gandcrab

  • Size

    88KB

  • MD5

    d2184d764de9750ec633a11bbeae03d6

  • SHA1

    f8dad8ac9f1830bdf1a09d7fb706ac0bd1d3b1e8

  • SHA256

    bc68acef958cc81962a47f25cfdcfbc34bde73dcc15f5072b00e28fa7f4fcb93

  • SHA512

    c01ab3a89de67bcc16d4c76c3281ca68a319e6d91d858840c6ecf95a9e35df2b0af6d8b65f9b42569ac8cb4b2ccfe99169395fedfc23d59b67f8c13f0bd37299

  • SSDEEP

    1536:VrsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:VjDX9pwzMqqDL2/mr3IdE8we0Avu5r+g

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_d2184d764de9750ec633a11bbeae03d6_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections