General

  • Target

    2024-08-17_436cd52cac893ca9c2f049d8a0c9d54c_gandcrab

  • Size

    76KB

  • MD5

    436cd52cac893ca9c2f049d8a0c9d54c

  • SHA1

    63e08da85b3737ee9e258fc005f7bbca97a28f5b

  • SHA256

    5f3a701eb54edc1f2697f445d99d06530d86a8093ca86db4014f545b62fe5291

  • SHA512

    194cd45844b3f9ede9f432fa539e61b3fb4a7c02f0ff47080c17e47f2a2b6573ff0004f0de6b0061d09a2c078f911fab39c7080e296bc7b5f7b14994fafc7d6f

  • SSDEEP

    1536:655u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rG:gMSjOnrmBTMqqDL2/mr3IdE8we0Avu56

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-17_436cd52cac893ca9c2f049d8a0c9d54c_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections