General

  • Target

    2024-09-04_0b5818f42e7404fd370f01f33c40a235_gandcrab

  • Size

    73KB

  • MD5

    0b5818f42e7404fd370f01f33c40a235

  • SHA1

    96e33fee06ffe4f950fa24cd4f2a0d4256857008

  • SHA256

    f0fa9f5d30d280626528e963b7aa5c8447fac33871019d30c8a9fd9783652054

  • SHA512

    61449bd365d44aa6f9c72c4883e3adefc17900640a2d84725c5f87c003a1cf3ab6b053035f17ab2f0b6343618308c4bdcd13a4b2e15ac83bf70c8eaa727c0f68

  • SSDEEP

    1536:Z55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:xMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-04_0b5818f42e7404fd370f01f33c40a235_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections