General

  • Target

    a66f9fc18440adedd1c42b33e568d175.bin

  • Size

    73KB

  • MD5

    a66f9fc18440adedd1c42b33e568d175

  • SHA1

    f549ce643f9257719874846045ff83b502994fa4

  • SHA256

    971bb73356edcaae9f23a8aaf392b450e21220bd01508b38b37200aecc31e5de

  • SHA512

    43313a36cce73a9bfb7145bc2495ff49bb8f6c100109191887e8ff21b68cecdc48fee5b3b740e0daa8fd8be6ca4a77a4a9f91994eedc4bc80038639028a97ecf

  • SSDEEP

    1536:z55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:vMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a66f9fc18440adedd1c42b33e568d175.bin
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections