General

  • Target

    eb36d527edb80eexeexeexeex.exe

  • Size

    73KB

  • MD5

    eb36d527edb80e3b6b269448f5f550cd

  • SHA1

    480924f9dae61429433a184fd4ba42ded5a14bda

  • SHA256

    d18aa99283d8d83429fa5445f256fd158b6123dc802f9a15cc898aa00c8d9799

  • SHA512

    2b4ccb75bb52778a7835146d875db1383be800e91cc525ecddc16f790c3cb38b96b3f3e59fd8d8284862067f9262ccebb471a035533b92eb20374aef0007888b

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0y0MqqU+2bbbAV2/S2mr3IdE8mne0Avu5rZ:gMSjOnrmB8MqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb36d527edb80eexeexeexeex.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections