General

  • Target

    2024-01-06_2b81cf4cd628bbbbae9bd2f67c990a3f_gandcrab

  • Size

    73KB

  • MD5

    2b81cf4cd628bbbbae9bd2f67c990a3f

  • SHA1

    b9aa16ea9e26ac4801a578fd28893b2eaa8f4d44

  • SHA256

    effb7d071b03bb81f3bc869b14d4b63dc2b1ca059bbed61f63157cde30c70644

  • SHA512

    53f147e463cf085acd4d5b264126d4534c1e9762bf2985b162b1e62383e04df00f4a4f25732b823bdcf82775c0912d47c844cc58735613f1ca48992935ed1956

  • SSDEEP

    1536:TgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:TMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-06_2b81cf4cd628bbbbae9bd2f67c990a3f_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections