General

  • Target

    2024-01-01_9c74238d3bc8637149a9c0250968f93b_gandcrab

  • Size

    73KB

  • MD5

    9c74238d3bc8637149a9c0250968f93b

  • SHA1

    f2f9614d8aaa6d749f2462f6a86b8c6ef061aab7

  • SHA256

    075d8e7aa06058f92d206efa3a9a289e03539fdb19eedb0ee45a7fc4e3de9acb

  • SHA512

    8290b7f651d9b775ad392f4fe4c1f8891c2f2086ed8f47f5655dfd712f0f25aa25695c4498bfb33b2f39a82885e5af223fba90b7e579773653ee3280eb897c62

  • SSDEEP

    1536:+555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:PMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-01_9c74238d3bc8637149a9c0250968f93b_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections