General

  • Target

    dd89e4499ba1e9exeexeexeex.exe

  • Size

    73KB

  • MD5

    dd89e4499ba1e942eaa7ae8ebba239a6

  • SHA1

    3215e229e79f40151e696bd1abaeac9a64325703

  • SHA256

    bc3945f298a5fca1d85a4fbf72df8f42eba67de18174bf4eba77e2f3837a10ec

  • SHA512

    bcfce4fc7cf22844122908ad24e63c07a8b7085725d75366559e13b1fe50e7d76290c59f4c1049a8232320c5d09498731e122553af07de778d323faab5f2a8b0

  • SSDEEP

    1536:e555555555555pmgSeGDjtQhnwmmB0yl4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5+:vMSjOnrmBd4MqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dd89e4499ba1e9exeexeexeex.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections