gandcrab | 797007e952206028c49f2793beba713cac4f1fbdfd1d2ab9c465d210a3efc1d1 | Triage

Submit
Reports

Overview

overview

Static

static

2024-11-11...ab.exe

windows7-x64

2024-11-11...ab.exe

windows10-2004-x64

Sharing

General

Target

2024-11-11_dde175b120d7f16b951dac60785dead2_gandcrab
Size

74KB
Sample

241111-w9fr1awrdl
MD5

dde175b120d7f16b951dac60785dead2
SHA1

31b25a4a5ab8f8b81b635eb0c4513d7ed5c60ad8
SHA256

797007e952206028c49f2793beba713cac4f1fbdfd1d2ab9c465d210a3efc1d1
SHA512

c9f9bf3345fc5864568b5b850dfbff3e0669520d99bdfa435b11f85900434890b3551f8de345c92ce8e21660f12ff4c2ae49ac155241a2465132e2cd983df1fd
SSDEEP

1536:xZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAmMqqU+2bbbAV2/S2LccuN:tBounVyFHjMqqDL2/LccC

Score

10^/10

gandcrab backdoor discovery ransomware

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

2024-11-11_dde175b120d7f16b951dac60785dead2_gandcrab.exe

Resource

win7-20240903-en

gandcrab backdoor discovery ransomware

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

2024-11-11_dde175b120d7f16b951dac60785dead2_gandcrab.exe

Resource

win10v2004-20241007-en

gandcrab backdoor discovery ransomware

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  2024-11-11_dde175b120d7f16b951dac60785dead2_gandcrab
- Size
  
  74KB
- MD5
  
  dde175b120d7f16b951dac60785dead2
- SHA1
  
  31b25a4a5ab8f8b81b635eb0c4513d7ed5c60ad8
- SHA256
  
  797007e952206028c49f2793beba713cac4f1fbdfd1d2ab9c465d210a3efc1d1
- SHA512
  
  c9f9bf3345fc5864568b5b850dfbff3e0669520d99bdfa435b11f85900434890b3551f8de345c92ce8e21660f12ff4c2ae49ac155241a2465132e2cd983df1fd
- SSDEEP
  
  1536:xZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAmMqqU+2bbbAV2/S2LccuN:tBounVyFHjMqqDL2/LccC
Score

10^/10

gandcrab backdoor discovery ransomware
- GandCrab payload
- Gandcrab
  Gandcrab is a Trojan horse that encrypts files on a computer.
  ransomware backdoor gandcrab
- Gandcrab family
  gandcrab
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gandcrabbackdoordiscoveryransomware

behavioral2

gandcrabbackdoordiscoveryransomware

© 2018-2025

Terms | Privacy