General

  • Target

    2024-01-10_fb72dcd776b6d322cba0b0fcf511a03a_gandcrab

  • Size

    73KB

  • MD5

    fb72dcd776b6d322cba0b0fcf511a03a

  • SHA1

    d89631ca31771534ae084edfdf8c0c61e3011255

  • SHA256

    e6107d1649246e41dd51ff69b572abd4a05378494b188dbfeb9b2585ab97bc2a

  • SHA512

    6a8607ed55d9b3ae391a04ffcc6ee723138d730e634250ce19a4d3db31b116fbe4f7a264e909114460cc1a37757ea4c284d1d286148d2522b53a916b2efdc919

  • SSDEEP

    1536:h55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:JMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-10_fb72dcd776b6d322cba0b0fcf511a03a_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections