General

  • Target

    2024-05-02_bd6245f287b9f0013279eb21ac9898e0_gandcrab

  • Size

    83KB

  • MD5

    bd6245f287b9f0013279eb21ac9898e0

  • SHA1

    877caf7e166ec4bbba5ab216b795b7195c616f3d

  • SHA256

    87cae962c8e219800c072dd5081af3e387da7a4f5b7409ae50bf59614a265f4e

  • SHA512

    59347b0921fb13a37c0e0d84313770fae2ee1f34d0f442218fee6a49b8e99c76174d7fb72e4c175d41005ba502d5f9cc80ddfa567b139263b3a290d832fba59b

  • SSDEEP

    1536:K55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:QMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-02_bd6245f287b9f0013279eb21ac9898e0_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections