General

  • Target

    2024-01-08_0a8568e4eee764591957e2bb030f4f91_gandcrab_wapomi

  • Size

    90KB

  • MD5

    0a8568e4eee764591957e2bb030f4f91

  • SHA1

    3ef3ac2eb339111d45cfd8ec5e88bf05013e1c4c

  • SHA256

    a44fd512d5cddf10c0cdfa3c8c00b89e473ff1a85d76dad5796c24b9823f7b9e

  • SHA512

    9b7381874b1428b589bd0b38f333f761685e8ced20416ac3bb31e97a433388b154d2a71a54174c8d33dfcc1c29e40cca5c9a808bd17cb521f16e755eb2aa594e

  • SSDEEP

    1536:155u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rs:dMSjOnrmBTMqqDL2/mr3IdE8we0Avu5I

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-08_0a8568e4eee764591957e2bb030f4f91_gandcrab_wapomi
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections