General

  • Target

    2024-01-01_64b4d6124a61f448e29dea14ddba182e_gandcrab

  • Size

    74KB

  • MD5

    64b4d6124a61f448e29dea14ddba182e

  • SHA1

    01a559d95c7a1900c6036b862dd13bc6a9894ee5

  • SHA256

    f5362ff265fa7501e877649a4b7eb642090fd8e9eaed712d8585aa8f90d6af28

  • SHA512

    5c642e7dc5bc07fdefb28d8be65bdd130e36c9471eb40b6a61faff32fa861551503caa9a6b3232d711d3081edb23eb1a939c7c62453bfa8cc18e552f0220af82

  • SSDEEP

    1536:l55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rN:tMSjOnrmBTMqqDL2/mr3IdE8we0Avu5x

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-01_64b4d6124a61f448e29dea14ddba182e_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections