General

  • Target

    81d8e906d9210afc6504801895bea909.bin

  • Size

    73KB

  • MD5

    81d8e906d9210afc6504801895bea909

  • SHA1

    83d28b8a4d33d195849996556467bb313ef53c9e

  • SHA256

    aa9529cfc9a5ca702c8c8e2f5c6bfbd22b4ddeb70a3d53174980d539180b068d

  • SHA512

    dbfd2e286bc1545c54d68b7aced0347614f27b208aa120fa444a591add3a2b9ffc2dbb7c27ac79179cabcd19bdd7d6c5970a432d9f59005942f00e4a3dc60bed

  • SSDEEP

    1536:5555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:GMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 81d8e906d9210afc6504801895bea909.bin
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections