General

  • Target

    2024-09-09_c8a9e08ba74ed10543bef64438d05025_gandcrab

  • Size

    76KB

  • MD5

    c8a9e08ba74ed10543bef64438d05025

  • SHA1

    12b96ce73cad1605715ce1f5aa20723e16b8477d

  • SHA256

    de6b85a126f7ed2047929eac934af8f5b845e2ca08b990a4a9b11b45b7695680

  • SHA512

    fa05f623ba8c44cacbc32838508a6ce9e51b311fda5414e8fc40c3cc24b0b9de202eb9059b4f93c41e214c2900f7a92f57ace6068c239076a885a53393cfa67f

  • SSDEEP

    1536:q55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:wMSjOnrmBTMqqDL2/mr3IdE8we0Avu5V

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-09_c8a9e08ba74ed10543bef64438d05025_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections