General

  • Target

    2024-08-25_3d22f3aa8f37256c99f4872c3988a0c0_gandcrab

  • Size

    75KB

  • MD5

    3d22f3aa8f37256c99f4872c3988a0c0

  • SHA1

    7506fbf33763ddc541bd430b275343436a8149aa

  • SHA256

    92d13f1a0e151f37add214276443507447a0e77171b23bca93e54a15e9cce47b

  • SHA512

    d8bc7689117d6fc330fe923aaaf3ee773b1e2a5eca5887e6883529b78f0cd25d5525fd988eab5b321d682af204c1d316b8591853ef6222871b4017bd51dee468

  • SSDEEP

    1536:O55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rt:EMSjOnrmBTMqqDL2/mr3IdE8we0Avu55

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-25_3d22f3aa8f37256c99f4872c3988a0c0_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections