General

  • Target

    2024-01-06_66ff452376e454185a8d0e55f4482a7f_gandcrab

  • Size

    88KB

  • MD5

    66ff452376e454185a8d0e55f4482a7f

  • SHA1

    df6358d723cbbd8fce7f5ea940f1138ebc9d725b

  • SHA256

    dd63166103ea50ff2f8b445abff6ba4324905f0d19ebdc7ce25a4fb81807d7d0

  • SHA512

    2448a51b277c9f140088e09a4877826a152940581d207d681b19d36ed073e25c6d4cd65115039b7a6bfae29a8ddcfe4486326911a10748e797c7ada302b5c66c

  • SSDEEP

    1536:OrsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:OjDX9pwzMqqDL2/mr3IdE8we0Avu5r+g

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-06_66ff452376e454185a8d0e55f4482a7f_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections