General

  • Target

    8fd17ec7e69abeexeexeexeex.exe

  • Size

    194KB

  • MD5

    8fd17ec7e69abea7108cf48e0a0bf086

  • SHA1

    82c03051482cdc49a0b5894a873ec1e3832de915

  • SHA256

    7b09bb77b2b03ce8717f37c85cc062f89b31c2b92ada27912425e07f381e983a

  • SHA512

    344c75086f6fea63ac42284cdd07033a8b5168694f4955e22cc8a84d6194f7e610463ef17fbd7f7979cfb70a208b15f099ccd6065cffea19ef9bc42cef10b892

  • SSDEEP

    3072:YD9tBYvdqQeF6jVbOPP4MqqDL2/phDMkcUkIwofej9Q7WWdE+FBaDmh8CohxggEM:6t5IsPzqqDL615vdm/

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8fd17ec7e69abeexeexeexeex.exe
    .exe windows x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections