General

  • Target

    202401069b139bd9a758f9b28870ce51bd1874ffgandcrab.exe

  • Size

    73KB

  • MD5

    9b139bd9a758f9b28870ce51bd1874ff

  • SHA1

    1af8eabc5881e674f25745f362b5ee68642a708a

  • SHA256

    07f723a935eef81e2ddcfec7bfef7ed6dcf2b6846cc99f634aa83088e14dd483

  • SHA512

    c982ea6f204403a9d51563d5f04f67c75eb628135c1a492efe78fe4ad1e0db22440275ac4e960b47af4c99870472a5e0d716316bf5efb5e794879d4b13480d5f

  • SSDEEP

    1536:R555555555555pmgSeGDjtQhnwmmB0yxMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rZ:eMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 202401069b139bd9a758f9b28870ce51bd1874ffgandcrab.exe
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections