General

  • Target

    2024-01-10_e149d3983dfcaef80457ee9419894970_gandcrab

  • Size

    88KB

  • MD5

    e149d3983dfcaef80457ee9419894970

  • SHA1

    84995bed9873e8672b30612f419bcb488fb5aaac

  • SHA256

    b93898d02f21aff865761d6609b1b14a7450da9d5cad8aeafe34873620273111

  • SHA512

    5e971bef6c8dcfad81600654f1440b85fb756cb60a5a91426d32f97919acdf25248be624cd64aeaba46087133de3fdb444b2f7bb06d512d49699d2cd9eb8b5e7

  • SSDEEP

    1536:6rsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:6jDX9pwzMqqDL2/mr3IdE8we0Avu5r+g

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-10_e149d3983dfcaef80457ee9419894970_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections