General

  • Target

    2024-01-06_0fa44887655979e4bf23bca9dcd32eaa_gandcrab

  • Size

    73KB

  • MD5

    0fa44887655979e4bf23bca9dcd32eaa

  • SHA1

    a2b3469129c8a7c1aa07de64e72be89a9b28a412

  • SHA256

    63f10cd8b773fe5bbb09809c270eb6d04f248220cf2bcb862d1557d710c6ea3a

  • SHA512

    69050c3c39b4085a2dfe70eb585ddcc42aa1e7538510fecdda8d27e52a01f915f93f498d178fa366cf62264be05c4fc3e017736fde6214e30597915ae67891d5

  • SSDEEP

    1536:TgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:TMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-06_0fa44887655979e4bf23bca9dcd32eaa_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections