General

  • Target

    2024-01-10_e654ad59fdfb50ee784ac33f831556c5_gandcrab

  • Size

    73KB

  • MD5

    e654ad59fdfb50ee784ac33f831556c5

  • SHA1

    7b97ff33095a3dd77ed6d6339fedd6867bd72897

  • SHA256

    ae83240635915f00a7a00e5407a701072ed500a0a0f94dbb7b30e27f1403b448

  • SHA512

    ce4c97987126099a69153136ea24f7dd9219b4023080c847435c5288219eb2e768b5ab71be35cd57fb3a5fe1761ef2c4450fbacb666aae72e62783c4d1be0797

  • SSDEEP

    1536:O55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:EMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-10_e654ad59fdfb50ee784ac33f831556c5_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections