General

  • Target

    2024-05-05_ca7e308310a127f88165d665b545e274_gandcrab

  • Size

    74KB

  • MD5

    ca7e308310a127f88165d665b545e274

  • SHA1

    48669ea80a9a9596354b877818230908b6ba67c7

  • SHA256

    6870b4d5955b698786c88d39850a08c2b2cfd107df25c850bbbd16ac134155e9

  • SHA512

    50002fbef4ad2557577999c31d627d82243df37bde7201d7422acc598254053dc38cee33d34e48e2dacb9ae2495da2839d869614de3b3edb79085ddd022c300a

  • SSDEEP

    1536:c55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:eMSjOnrmBTMqqDL2/mr3IdE8we0Avu5O

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-05_ca7e308310a127f88165d665b545e274_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections