General

  • Target

    2024-01-06_d1f4a5389143a770412477f757a3fafe_gandcrab

  • Size

    73KB

  • MD5

    d1f4a5389143a770412477f757a3fafe

  • SHA1

    c897aff925ce6553283be4a88400fb04cfba815f

  • SHA256

    314d69d5d7245d4c9c5d5cd3355872810ff04dbd5d52f8156e93eaefb313276b

  • SHA512

    345f905cfff79c7d74e6c1156db72951d9103df2cbeac0d2568dc60fe405f9c59b5db85ce0db04d2e01718b36a969e29b273f03186f3ddf854f1e826e145f24c

  • SSDEEP

    1536:H55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:jMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-06_d1f4a5389143a770412477f757a3fafe_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections