General

  • Target

    aa1348e55a59169d4e20b92dc1365e06.bin

  • Size

    72KB

  • MD5

    aa1348e55a59169d4e20b92dc1365e06

  • SHA1

    81d198a1981f50eb867f227c088b743c8818d975

  • SHA256

    70ff736dc29c43e0973c611a81a313b372898c2c61e47b4ff657b229aa43ba77

  • SHA512

    eb639330249c42bfec30b4bb6acebad2a340d59f7df663550bc45e0d6f431c2497e39c3ff8f90517af596f47ec6c398bbac7227cb65e5a8c0b82b470179eec7f

  • SSDEEP

    1536:9gSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:9MSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa1348e55a59169d4e20b92dc1365e06.bin
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections