General

  • Target

    9109a8f59d6a2dexeexeexeex.exe

  • Size

    195KB

  • MD5

    9109a8f59d6a2d2e64073890ff84aa73

  • SHA1

    3fd67cd7809cc6995deb3cf974999ca39812a179

  • SHA256

    3cd623dc27d6fbeab8c4df163b6c42e48786fa4c733c9054d8784499b02370a1

  • SHA512

    cf5e91fb75b322d6f8d7b78818e0f0feea4687875e05d9fb7105dd13077428d4eb3ba39fd02514ef234052977674d5d8a70ef21cc6126c72b55b2eb8769a4b67

  • SSDEEP

    3072:lDag6JfFkEtWk0EWNPLMqqDL2/phDMkcUrIwofej9Q7WWdE+FBaDmh8CohxBGERF:lDaTNiPoqqDL61Bvdp

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.casa/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9109a8f59d6a2dexeexeexeex.exe
    .exe windows x86

    3a4e31760e5d4e68c4b2c0daf0a008ec


    Headers

    Imports

    Sections