Overview

overview

10

Static

static

10

2024-07-25...ny.exe

windows7-x64

3

2024-07-25...ny.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-07-25_dfd0cbf26982303d0d0bb901bd918fdb_bkransomware_gandcrab_karagany

  • Size

    194KB

  • MD5

    dfd0cbf26982303d0d0bb901bd918fdb

  • SHA1

    ed8b715896d35879ebcafa219d0ba7ccaaca2724

  • SHA256

    43d42892e7a7184ce0ecd1767493a219133a83c1b4f9a92f7142fc73bb6aee4c

  • SHA512

    120f5e35a0bef74651b9116e4aa1869649b9f3c3bdbffc32062a9aea0c27ad7e914c63cc730abe4ad3ec645c828c4f3cbf5f33b547dd938011f5877a3648de8a

  • SSDEEP

    3072:YD9tBYvPqQee6jVbOPP4MqqDL2/phDMkcUkIwofej9Q7WWdE+FBaDmh8CohxggEk:6tQIsPzqqDL615vdmH

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-07-25_dfd0cbf26982303d0d0bb901bd918fdb_bkransomware_gandcrab_karagany
    .exe windows:5 windows x86 arch:x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections