General

  • Target

    2024-05-12_0f8a69b676a65be942ebe61236dc2334_gandcrab

  • Size

    73KB

  • MD5

    0f8a69b676a65be942ebe61236dc2334

  • SHA1

    0143ba3a03dc743d6c56161b790a2fcecbc9df6e

  • SHA256

    9973bd5e6f1b404958279000772fd09b215a5aa5b5bc5252836fb31042efb1cb

  • SHA512

    7609ad1b32ce44d1e989ed570bdb2eae8f351098dbf7f409d3567834b30d82357f204469afcd1d19765021f3195e860affd46e0acdfd8dde0427651fd49c68ba

  • SSDEEP

    1536:K55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:QMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_0f8a69b676a65be942ebe61236dc2334_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections