General

  • Target

    ea389a7dd116dfexeexeexeex.exe

  • Size

    73KB

  • MD5

    ea389a7dd116df35941e3c1560408e58

  • SHA1

    a9592166f8f65b81703015d43d0461ff14c42de8

  • SHA256

    6c56dae85503c29200d38fe69f6c5a4fc462a6c7ab1e3adc8038df79d7a06125

  • SHA512

    8c71e1d89ff1585659b5ff656f9f0fa92f315d29b92b8f93ac146d2f2b622bf2225b6cd8ebfb507ae9db5be4ee99f8a7998c222080b9f720f6d9f5c9cf9cfdc7

  • SSDEEP

    1536:1gSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:1MSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ea389a7dd116dfexeexeexeex.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections