General

  • Target

    2024-09-07_3b66e79f70c31a645637cda4f6def890_gandcrab

  • Size

    77KB

  • MD5

    3b66e79f70c31a645637cda4f6def890

  • SHA1

    ee974b933cfc1d6def6313ded2b26e563b9661c8

  • SHA256

    4abd7980b689d693d9b33e326e396fe96ac5f548ad5751d9485af3910d992b04

  • SHA512

    c7448fa794b14a728bdaddc0bc29a06d3858b6e488152dd4edda4012579c40be11dcef2531210b751cf5e17f60a46f8170706497dd89ca216c116379bffb2481

  • SSDEEP

    1536:zgSeGDjnjhnwjyB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv9:zMSjVneyBbMqqMmr3IdE8we0Avu5r++X

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-07_3b66e79f70c31a645637cda4f6def890_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections