General

  • Target

    20240106b61a6fdd8b99ead946a31e666741ce0dgandcrab.exe

  • Size

    73KB

  • MD5

    b61a6fdd8b99ead946a31e666741ce0d

  • SHA1

    e0fca747ae547b975ee0577281566af294cf934f

  • SHA256

    95316de1d487a969dbc98da6fb96ee51cdcc8456040195acc5e5e129a32cf8c8

  • SHA512

    fb1fbca61c73d4c3a4a45130cdf050ccb7352d9c9d30fa315fd4c1a051ad89a78d7cbece5ab770e0ddca5f550c50f284036f0ee74e5f1f648b507fb5fcb9b33b

  • SSDEEP

    1536:t555555555555pmgSeGDjtQhnwmmB0yxMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rZ:KMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20240106b61a6fdd8b99ead946a31e666741ce0dgandcrab.exe
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections