General

  • Target

    f2fc9352a4dd3cd4dde4b77c2c41db22af62dce6f5dffa766958f8570def9070

  • Size

    83KB

  • MD5

    dd62f63c142c3c65985fa41c6e71b079

  • SHA1

    0c3ae87d868276ab290805dfcf958bf34ab38471

  • SHA256

    f2fc9352a4dd3cd4dde4b77c2c41db22af62dce6f5dffa766958f8570def9070

  • SHA512

    58fb9f6e6e5fdae0104d07f06886e7139f315012c6a2d529807431052e02a62e3f427f2334677b8acfb19b2176c7457d474bcacd97ebfbc8c5fcda8754cec9b7

  • SSDEEP

    1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f2fc9352a4dd3cd4dde4b77c2c41db22af62dce6f5dffa766958f8570def9070
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections