General

  • Target

    a9d24c501524e8exeexeexeex.exe

  • Size

    73KB

  • MD5

    a9d24c501524e8db96c1b23e1092818c

  • SHA1

    7fd346b80176a17923fa79998cfab0784b5ce4a7

  • SHA256

    2b9b2408e7a7c1819e9f29a8dd9187e04c2f0ed58e8f2efd89d420e31a8e6a5b

  • SHA512

    f4906c252046ea8f5d8de15696108860574cbe915f501bb5368eb409a563ee28e0c59b024c6beb2d24fc56ea8766b43410e39de7684d0a7352900d8a5e3460dc

  • SSDEEP

    1536:tgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:tMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a9d24c501524e8exeexeexeex.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections