General

  • Target

    654c801d144990exeexeexeex.exe

  • Size

    73KB

  • MD5

    654c801d144990a897f80ba13bea8bca

  • SHA1

    f2ec92016fb9f0ae6b4ebfb0576ad70d94506e09

  • SHA256

    e9e0bcd7ac07c99c221ef54b9dbefc63c694348a648b43469ac0acd8da10f3ef

  • SHA512

    6ff76b9e012f8be0c033d7e4db4b979b85e657f171eeba43671fcb550e01dc21349094c384a448d5b8542a98915ab4fb1fcb74d23e15aef10d51317b972fb778

  • SSDEEP

    1536:tgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:tMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 654c801d144990exeexeexeex.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections