General

  • Target

    17f503c0f10407exeexeexeex.exe

  • Size

    73KB

  • MD5

    17f503c0f104078fca297d76095dc2b5

  • SHA1

    11910f0d5e319b781736ffe7a7712278057cc96e

  • SHA256

    988278515aa88b12bcb23a7e7823faeb73bcc376134e97b3b9ecb600c8acd90e

  • SHA512

    1c3fa3b411b70b64c4b7bf2f09e90826036203709842a6064b15a0583c247e26a73b60df0474056f3558ffec964986f11b39e569910a07ef2e3c467f2ff41ade

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0ycMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rh:gMSjOnrmBkMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 17f503c0f10407exeexeexeex.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections