General

  • Target

    2024-09-09_eaea5691b51afc83e3c3e609b0d5a3b7_gandcrab

  • Size

    73KB

  • MD5

    eaea5691b51afc83e3c3e609b0d5a3b7

  • SHA1

    81d6b9248801a1165ef4b713ee18a9d84f73547d

  • SHA256

    4c39b0bac67bc5be430f2d4a030c94f5219af1f1f1fe6f2f15080e698ef5d18b

  • SHA512

    e2ff5baadeb31018251e8f06b824526fea8b0533a97b419875b27edfe7e5f8cefab22a8f3d187e1c0c3a7ea77117871941fe029618aac4f1758e4270b5a7e132

  • SSDEEP

    1536:955u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:1MSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-09_eaea5691b51afc83e3c3e609b0d5a3b7_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections