General

  • Target

    2024-01-10_8bee53a311979213439f71c06b21acbf_gandcrab

  • Size

    73KB

  • MD5

    8bee53a311979213439f71c06b21acbf

  • SHA1

    83b3ba31ed9926c022a9384f0d0271969fa45c11

  • SHA256

    12429c41dc4e7b266dc8ec00aede62d5494c96a83dc2bf7495d0cd293b3a920c

  • SHA512

    dfcb829fc1e1fa61739eea63e95f04811e302c37cb549337eeb9a6675753b064f01643642dbbce24d662a12d5122c3b8149603436fa256c7fee89440d58097e5

  • SSDEEP

    1536:M55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:uMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-10_8bee53a311979213439f71c06b21acbf_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections