General

  • Target

    2024-01-08_ec71ff65bc147c74337fff5b4bc78ebb_gandcrab_wapomi

  • Size

    90KB

  • MD5

    ec71ff65bc147c74337fff5b4bc78ebb

  • SHA1

    5c10e9612f72492d8da033b96e629afaafe6a17e

  • SHA256

    1228143f3a2522b7d6e5c86ff0bc979c60d54c48b1d6c2a32dd42020f4f6aaee

  • SHA512

    d23270aac5e51d8aecaf021dfbca381c593a0828e95a76f06687c07d4c3cacb23a897dcd0dc5b2a368454449743f9def8845e51a5f506e97f5e3573ff6de761c

  • SSDEEP

    1536:s55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rs:OMSjOnrmBTMqqDL2/mr3IdE8we0Avu5I

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-08_ec71ff65bc147c74337fff5b4bc78ebb_gandcrab_wapomi
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections