https://github.com/a0zhar/gandcrab

This repository contains the dumped and deobfuscated version of GandCrabv5 JS Binary Dropper, along with the webpage files dropped on a GandCrab v5.1 infected system. The goal of this Repository is to attempt to make the files easier to work with and understand.
https://github.com/a0zhar/gandcrab

deobfuscation gandcrab gandcrabv5 javascript malware ransomware reverse-engineering virus

Last synced: about 12 hours ago
JSON representation

This repository contains the dumped and deobfuscated version of GandCrabv5 JS Binary Dropper, along with the webpage files dropped on a GandCrab v5.1 infected system. The goal of this Repository is to attempt to make the files easier to work with and understand.

• Host: GitHub
• URL: https://github.com/a0zhar/gandcrab
• Owner: a0zhar
• Created: 2022-10-03T20:22:18.000Z (about 2 years ago)
• Default Branch: main
• Last Pushed: 2023-10-06T15:08:59.000Z (about 1 year ago)
• Last Synced: 2023-10-07T15:44:32.721Z (about 1 year ago)
• Topics: deobfuscation, gandcrab, gandcrabv5, javascript, malware, ransomware, reverse-engineering, virus
• Language: JavaScript
• Homepage:
• Size: 1.44 MB
• Stars: 3
• Watchers: 1
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# GandCrab Ransomware Related Files (both v5.1 and v5.0)

![GandCrab](https://blog.getcryptostopper.com/hs-fs/hubfs/GandCrab.jpg)

## The v5.0 (JS-Dropper) Directory

This directory contains files related to the JS-based Ransomware-Binary Dropper used by GandCrab v5 to spread. These files have been somewhat deobfuscated and modified by me to attempt to make them easier to understand and work with.

## The v5.1 (Webpage) Directory

This directory contains files modified by me, which were dropped on a GandCrab v5.1 infected system. This webpage, from my observation, serves as a file recovery help page that victims could use as a guide.