General

  • Target

    2024-05-23_516fe550c51efd9b30d62174660b1fda_gandcrab

  • Size

    73KB

  • MD5

    516fe550c51efd9b30d62174660b1fda

  • SHA1

    e8ea1697b6508040f33de734a776dd81723eb2f4

  • SHA256

    9eeb10c9ec40d5efda01cef8587568839e950ce94546e9ead4b4140d5e336cea

  • SHA512

    17ac8b8565d6d90e677f0321505bdb6d3e0b6fe92cbe6199ddf35922a13762014a9878192a80db733f2eaecb3093d6f286fbeaea55be1d4cbeb69c3684634dbb

  • SSDEEP

    1536:v555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0AvuI:wMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_516fe550c51efd9b30d62174660b1fda_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections