General

  • Target

    8b254aa7d00addexeexeexeex.exe

  • Size

    73KB

  • MD5

    8b254aa7d00add1ada39d366a1f013b4

  • SHA1

    b73f7488fa6d50b16bb099d699e7805316941317

  • SHA256

    3d0a6e0847191139bfb67b52bd6d6746f04d05f1b46271c6d0da3b3558544cbf

  • SHA512

    6d8a84a9e7c9d467c2c2e10ce72a560582722e21a03479b191cf2369ee8d65b8367d56b3e3449003d7e12d4e7f4eb54665add639ff1a5138bda02fc1b4fe1846

  • SSDEEP

    1536:f555555555555pmgSeGDjtQhnwmmB0ypMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rl:AMSjOnrmBRMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b254aa7d00addexeexeexeex.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections