General

  • Target

    2024-01-10_943ca4a85a54325d6bdfb5c9ccd452e7_gandcrab

  • Size

    73KB

  • MD5

    943ca4a85a54325d6bdfb5c9ccd452e7

  • SHA1

    9ca80fc00c3883120c95acf6e8007df7de3e24b8

  • SHA256

    f37e5a71ef2f057790799ab1a7fbe3f906b6f61d3704179f734c28863eb9ccd0

  • SHA512

    6f86cce3084de09a506ad92b995d3dd4f7f4cfc0f39d495f95c691f143dd48a48828ecb0151e92c79800564d041dafcee36a48b29f69f0375bad6ef088d08d7f

  • SSDEEP

    1536:z55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:vMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-10_943ca4a85a54325d6bdfb5c9ccd452e7_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections