General

  • Target

    69c1ec6b75fa73e29475e7968ca18074.bin

  • Size

    83KB

  • MD5

    69c1ec6b75fa73e29475e7968ca18074

  • SHA1

    4d09c95849535110b760fae51d78522939a22a76

  • SHA256

    874ae352d63653a246680ca1d07a853702185c0dc15a756ae04aebca81f165af

  • SHA512

    8641f7c15936633f3925186fe7402ca80bfba1298bfcb4bbee22158e986c4ecbb71824ecbf50f2459a9f4b333a1b118d489ace82d498683d5d3bcad48e36fdfb

  • SSDEEP

    1536:055u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:mMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 69c1ec6b75fa73e29475e7968ca18074.bin
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections