General

  • Target

    202401067857f898322b1ee77dfa634778a6828agandcrab.exe

  • Size

    73KB

  • MD5

    7857f898322b1ee77dfa634778a6828a

  • SHA1

    fd1d9fc2b1f4f7236046655d799796e428a4ec8d

  • SHA256

    a7f2062ea9670ce2e9a1d9088d74470d117698f83a7c4e413a0f613aa7ea8b4c

  • SHA512

    59b260bc509ca358010e608972af0ec72918ef422492cf0baab32e412bfe3c3adc147002d28cee0d72895bfeb7eae5230815b580969584d7cb9034493702831f

  • SSDEEP

    1536:ygSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:yMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 202401067857f898322b1ee77dfa634778a6828agandcrab.exe
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections