gandcrab | fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089 | Triage™

Login
Reports

Overview

overview

Static

static

3

fbfbd834c4...89.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089
Size 293KB
Sample260827-m39bashc54
SHA256 fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089
MD5 abd3c728e88ea17ec02360d8d6932bee
SHA1 4801cb217d77d13a5d09606b29495e55377b475d
SHA512 e16f253d8f0a1c8d3c530c11a5c5b030cfc78f693308f26da4cf33a547e87aba5ec8ce6bb8c70dd6b8663fca6bf491ce1c54336e79fd86e63628333fb02a4e98
SSDEEP 6144:t/4Eju1iYJDD9KWdmkoN9fHprEBnL5r2GtGrjLZepht99GwO:t4Eii8DDcW0fz5EBJ2GtGrjLZepht99o
TLSH
T175548D1F3FED7C62C6B65F310D19DA6425CDF5AC0DBA2A9B364CC93A8934DD2C212921
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

gandcrab backdoor discovery ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

backdoor discovery gandcrab ransomware

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.casa/

Targets

- Target
  fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089
- Size 293KB
- SHA256 fbfbd834c448d088c38af62a2c0c60b17b6b4804606eaf3aa01505490c688089
- MD5 abd3c728e88ea17ec02360d8d6932bee
- SHA1 4801cb217d77d13a5d09606b29495e55377b475d
- SHA512 e16f253d8f0a1c8d3c530c11a5c5b030cfc78f693308f26da4cf33a547e87aba5ec8ce6bb8c70dd6b8663fca6bf491ce1c54336e79fd86e63628333fb02a4e98
- SSDEEP 6144:t/4Eju1iYJDD9KWdmkoN9fHprEBnL5r2GtGrjLZepht99GwO:t4Eii8DDcW0fz5EBJ2GtGrjLZepht99o
- TLSH
  T175548D1F3FED7C62C6B65F310D19DA6425CDF5AC0DBA2A9B364CC93A8934DD2C212921
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery gandcrab ransomware
- Family: Gandcrab
  Gandcrab is a Trojan horse that encrypts files on a computer.
  ransomware backdoor gandcrab
- GandCrab payload
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

backdoordiscoverygandcrabransomware

© 2018-2026

Terms | Privacy