General

  • Target

    20240106b96a2bc81b11b5ba5006178b031e8bfbgandcrab.exe

  • Size

    73KB

  • MD5

    b96a2bc81b11b5ba5006178b031e8bfb

  • SHA1

    5599a770209a7ec49df50b3873e54fc8e6a72de9

  • SHA256

    868273d99d4f12efde331f4b5507f73189ac04e1a5cc23ad04e87c703f9a139f

  • SHA512

    c983579b1780134ce502d97cc0d7f9368bea9daffe741bc073a192f71358f52f7566bdab128e1a39b96a2b3e0e61ec12dc9231a8fc39a73cbb5b03d54c4bbebc

  • SSDEEP

    1536:S55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:oMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20240106b96a2bc81b11b5ba5006178b031e8bfbgandcrab.exe
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections