Overview

overview

10

Static

static

10

2024-04-28...ab.exe

windows7-x64

6

2024-04-28...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-28_1e971ee5b281017631e97092223ac97a_gandcrab

  • Size

    74KB

  • MD5

    1e971ee5b281017631e97092223ac97a

  • SHA1

    b130768601d135f8958b5e996c98e726085a384a

  • SHA256

    20322713cec9fb8fae2b6593170750bc9c5649fa41c44f6a11e4ec301e9b3720

  • SHA512

    51774b3c73080f45ce570aaa1ef0728302b7bad78781fdbc9d6956b53e1251ed245ee891ce3550f45e3d62b7aeb8ab9e3362a6db6f02ae18ea19bde6956327d5

  • SSDEEP

    1536:955u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:1MSjOnrmBTMqqDL2/mr3IdE8we0Avu5O

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_1e971ee5b281017631e97092223ac97a_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections