General

  • Target

    202401069b1d086d71b342dacd3f884da899dfd5gandcrab.exe

  • Size

    73KB

  • MD5

    9b1d086d71b342dacd3f884da899dfd5

  • SHA1

    f7d065bf7bdae50071074bc4f8d778c2e95d5fdd

  • SHA256

    85f2fcc2c7418877d048d627c16ba153729f48684502009d3de7f543200c0093

  • SHA512

    911cfd56c7963d313605e160788e5e5057d5a87aebc0864d9ec38c6495b843f15871cfd9040dd66c907d399e7d7d5b9dea92322f5f1e0179d835a859a40543a6

  • SSDEEP

    1536:FgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:FMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 202401069b1d086d71b342dacd3f884da899dfd5gandcrab.exe
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections