General

  • Target

    f567973db4ae02exeexeexeex.exe

  • Size

    73KB

  • MD5

    f567973db4ae024b54fce70c2c6e5b30

  • SHA1

    c3584ddb89284d67a94300cc996e9895209ad192

  • SHA256

    12e3b68397d7dd389edb2de784c7071eb6c39830f1fd19b221e655037dbdf105

  • SHA512

    0374a00a8308085fc3d88fc536ac9dc20fbfdbd2afacc51d32fe35d2370b0cb80df641ee070f9d38b656f0703dced7ce3dc6526cd89bd80263cb18aa2a36c283

  • SSDEEP

    1536:k55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:2MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f567973db4ae02exeexeexeex.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections