General

  • Target

    2024-01-11_17adb585cf4a9c1629a2405929828188_gandcrab

  • Size

    73KB

  • MD5

    17adb585cf4a9c1629a2405929828188

  • SHA1

    d1ce86467fc49685115ecc1d755e5ebe8c814d68

  • SHA256

    62c7a30fb973b67a4b1439f6c7d5dc33822003512c6c8ad0881b7a9e8ec88346

  • SHA512

    a9a12b7d697d76fcadc1946d15427e184a2482a165bc8d9cff0840540da9ee286d9204f0d64bc1571ae38b60b42b40108c9f8a808a3f42ed69b48bbf83f479d8

  • SSDEEP

    1536:ygSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:yMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-11_17adb585cf4a9c1629a2405929828188_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections