General

  • Target

    56c61e62c995569c88fc5c2170f67297.bin

  • Size

    73KB

  • MD5

    56c61e62c995569c88fc5c2170f67297

  • SHA1

    298506723c3e9143e58d8925e0b88b40951b0005

  • SHA256

    3d89f2ea9eb5c4ccde746d1c4ae3bf5cc8355dc96ec6bab150e69b00c8fdb5b3

  • SHA512

    081019851cae5485535447415f09517376db72dc8adb298457fd2358b2d8e2f66524bc37a8224d3a240a442befc6a60637db795f1ae0b8549110d95a81398926

  • SSDEEP

    1536:x55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:5MSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56c61e62c995569c88fc5c2170f67297.bin
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections