General

  • Target

    20240106bde125612821881218cee1bd29dfe3f8gandcrab.exe

  • Size

    73KB

  • MD5

    bde125612821881218cee1bd29dfe3f8

  • SHA1

    d7b0901bfe7266514f749b4ef52d255f7127d9e3

  • SHA256

    654c6a4bca700215efd1461c3d16b2634fe1ad0c7adac55267ec0a542d3ecda2

  • SHA512

    4a615d605e38e48b67c59c97772963af106318cdc407018666db6ec88778d4d96a84ea186b92a0c24afb7e3802c9b10de342857a150d3622d85bad612e134469

  • SSDEEP

    1536:9555555555555pmgSeGDjtQhnwmmB0yxMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rZ:6MSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20240106bde125612821881218cee1bd29dfe3f8gandcrab.exe
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections