gandcrab | 6d96e97373bcf0ba1f0e9ba56b9c65add659624f04443199771e251ef1a3a9f7 | Triage

Submit
Reports

Overview

overview

Static

static

2024-11-13...ab.exe

windows7-x64

2024-11-13...ab.exe

windows10-2004-x64

Resubmissions

13-11-2024 01:25

241113-bs36ravarj 10

13-11-2024 00:27

241113-ar7l4stfpk 10

Sharing

General

Target

2024-11-13_68bf5c6305b3cec63bcfa8a21ae14ee6_gandcrab
Size

69KB
Sample

241113-ar7l4stfpk
MD5

68bf5c6305b3cec63bcfa8a21ae14ee6
SHA1

5a967fcaff0accb1761867a13eeaa6c68c433aaf
SHA256

6d96e97373bcf0ba1f0e9ba56b9c65add659624f04443199771e251ef1a3a9f7
SHA512

d78cde10b6a5315460d1513224e96af53503b9774262f602ea1db759638b8b8475e09a316c18163b92a6cdfe9a05e445d00a5d93bd485ae254069fd9aaa1e02f
SSDEEP

1536:KZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAmMqqU+2bbbAV2/S2Lccu:8BounVyFHjMqqDL2/Lcc

Score

10^/10

gandcrab backdoor discovery ransomware

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

2024-11-13_68bf5c6305b3cec63bcfa8a21ae14ee6_gandcrab.exe

Resource

win7-20240903-en

gandcrab backdoor discovery ransomware

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

2024-11-13_68bf5c6305b3cec63bcfa8a21ae14ee6_gandcrab.exe

Resource

win10v2004-20241007-en

gandcrab backdoor discovery ransomware

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  2024-11-13_68bf5c6305b3cec63bcfa8a21ae14ee6_gandcrab
- Size
  
  69KB
- MD5
  
  68bf5c6305b3cec63bcfa8a21ae14ee6
- SHA1
  
  5a967fcaff0accb1761867a13eeaa6c68c433aaf
- SHA256
  
  6d96e97373bcf0ba1f0e9ba56b9c65add659624f04443199771e251ef1a3a9f7
- SHA512
  
  d78cde10b6a5315460d1513224e96af53503b9774262f602ea1db759638b8b8475e09a316c18163b92a6cdfe9a05e445d00a5d93bd485ae254069fd9aaa1e02f
- SSDEEP
  
  1536:KZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAmMqqU+2bbbAV2/S2Lccu:8BounVyFHjMqqDL2/Lcc
Score

10^/10

gandcrab backdoor discovery ransomware
- GandCrab payload
- Gandcrab
  Gandcrab is a Trojan horse that encrypts files on a computer.
  ransomware backdoor gandcrab
- Gandcrab family
  gandcrab
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gandcrabbackdoordiscoveryransomware

behavioral2

gandcrabbackdoordiscoveryransomware

© 2018-2024

Terms | Privacy