General

  • Target

    6ad8566f048d91e9c25c7fd6a38a3866.bin

  • Size

    88KB

  • MD5

    6ad8566f048d91e9c25c7fd6a38a3866

  • SHA1

    d0a229198a667fc0cd63eaf06d67787c80cd32b0

  • SHA256

    eb683dac82bc9d72f9818a13cd50099b6fcf78f157466931750851c952c6842e

  • SHA512

    2699a885371c9b03705aa5596a1dccc37dab3abcf4f10e2ea809ca5cdd7db57e291ecdb8ce121a2973d723176e11bde7668498fb399fea6c9cc541742e940288

  • SSDEEP

    1536:BrsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:BjDX9pwzMqqDL2/mr3IdE8we0Avu5r+g

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ad8566f048d91e9c25c7fd6a38a3866.bin
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections