Overview

overview

10

Static

static

10

2024-05-01...ab.exe

windows7-x64

6

2024-05-01...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-01_859159de91673f70aded3f27f6d4607c_gandcrab

  • Size

    74KB

  • MD5

    859159de91673f70aded3f27f6d4607c

  • SHA1

    dc5c51fe517301b2294474ccb1fd5df8836ff440

  • SHA256

    34bee8cb00725df35efa16d5ad3dc631b59a6fcbfe592077f963bccb9145a36a

  • SHA512

    90a004133d278db91856804de6eee09a4f94a52d7907b5d468711fe9cfe30a0f8cfc351e356b16edb3fab14c0bda3c51f8e6f5d51f957a4ed5ec1c07c387d8c4

  • SSDEEP

    1536:755u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:HMSjOnrmBTMqqDL2/mr3IdE8we0Avu5O

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-01_859159de91673f70aded3f27f6d4607c_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections