Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-01-05_00d4e168d2d0329e13b76866087189f3_gandcrab

  • Size

    346KB

  • MD5

    00d4e168d2d0329e13b76866087189f3

  • SHA1

    968b964323e71986c564dc6815273eacea6167de

  • SHA256

    34ffc01094f9383d273157ae9000b638c746f081b8e33624e0bdefc5c17bd98b

  • SHA512

    8f755cffa7a40f86d876d11dc9358f9da11374ed39bd95245c134409594cc11d6680ff6136dca178fc91d5c533c2e450f5b830bbf042f036ff5babea07c2fefe

  • SSDEEP

    3072:4MSjOnrmBxMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdMEa83Rg0EkmlB1yihDNC+:4XjOnr6aqqDL64vdyQmIihDNCwQIPP

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-01-05_00d4e168d2d0329e13b76866087189f3_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections