Overview

overview

10

Static

static

10

2024-06-13...ab.exe

windows7-x64

6

2024-06-13...ab.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-13_95e4cc217258344cd07e2fecf49c5067_gandcrab

  • Size

    74KB

  • MD5

    95e4cc217258344cd07e2fecf49c5067

  • SHA1

    2bf7fa4b2da943c8babfd4dd764785cc0a6fe91d

  • SHA256

    50826e3380ab96f2c94908267b10817c91a94d07a28570edd0b3570c0bf31495

  • SHA512

    f9473d25ce0c4be4989a440711b196d3c3c5a31e991261210a54ed449e6606894a23f76bec533958ebfc4c48a984c1fa7ff2a6c9b26b524d399699d35b4df842

  • SSDEEP

    1536:N55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:lMSjOnrmBTMqqDL2/mr3IdE8we0Avu5O

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • Detects ransomware indicator 1 IoCs
  • GandCrab payload 1 IoCs
  • Gandcrab Payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-13_95e4cc217258344cd07e2fecf49c5067_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections