General

  • Target

    6b8259de602830exeexeexeex.exe

  • Size

    73KB

  • MD5

    6b8259de602830c20e8921761c3eb5f6

  • SHA1

    b16e7f41064f75b7f688a2d1604a0cd86e49eccc

  • SHA256

    638bbf89f851a67dfa14832375a1a0d91a95ae82653ad402d9d89080491409ed

  • SHA512

    ec1fd34dfcb2fe7757ef06526198f77f78431bb0a5d62ac4e954febe8fc5cde2fa6b15e75da83434f4efe2724c240795ffff90f5adb37149a26d0fb96c2f8e23

  • SSDEEP

    1536:R555555555555pmgSeGDjtQhnwmmB0yl4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5+:eMSjOnrmBd4MqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6b8259de602830exeexeexeex.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections