General

  • Target

    2024-09-05_268e20ee23daa9e0fe28335db539483a_gandcrab

  • Size

    77KB

  • MD5

    268e20ee23daa9e0fe28335db539483a

  • SHA1

    c80c811ffdcdb9f53697aecbd2493df4149d7d8c

  • SHA256

    3cbae52faee8c9e62621bb61031a28f1c8d261f6eea391c6dc6bbe29017b51c9

  • SHA512

    5c5954c369cf73ff2570d36ad17c3a75122286824487f85bbae143a73c232342a850e499ff95871a5295770fef7337c1bc98c86ceec194af25b88de652fdedb6

  • SSDEEP

    1536:PgSeGDjnjhnwjyB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv9:PMSjVneyBbMqqMmr3IdE8we0Avu5r++X

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-05_268e20ee23daa9e0fe28335db539483a_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections