General

  • Target

    2024-01-11_1d58f313ee7892e5b9ce5fd735975674_gandcrab

  • Size

    73KB

  • MD5

    1d58f313ee7892e5b9ce5fd735975674

  • SHA1

    784388f119f06d7c23558772ebbb318888c1fce0

  • SHA256

    11caeb43360b5a94fcd513b1e18230767b540f229a7f86286d4d917bd06455a2

  • SHA512

    ec20dce183adf85873d66c17235e7c4f635a44d1d337da469f288551a06f14662f600ba8b19bfd83efebf599f0de45593156567a893aba6945e0fd4f9cd688ac

  • SSDEEP

    1536:rgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:rMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-11_1d58f313ee7892e5b9ce5fd735975674_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections