General

  • Target

    2024-01-06_d29192e91ab222bbb54694d8e2bcc5e1_gandcrab

  • Size

    73KB

  • MD5

    d29192e91ab222bbb54694d8e2bcc5e1

  • SHA1

    ac07a69c653d2fefbbbd10eed0497b12de77bd06

  • SHA256

    0e98993a9f630ee84b03b7c2750a227e5221dc89a9ab16cccf17d53d8d1fe2cf

  • SHA512

    ca6304bd880e41d71dd3ee3c92b88e92e9babbb165449253e09e952e36fd3b10884290a0209b3e004675fb26555ddbca19c072a83068aed87891bad2d02b9326

  • SSDEEP

    1536:N555555555555pmgSeGDjtQhnwmmB0yxMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rZ:qMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-06_d29192e91ab222bbb54694d8e2bcc5e1_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections