General

  • Target

    2024-09-21_3473e74ae79e84270c410dbfa915c08a_gandcrab

  • Size

    76KB

  • MD5

    3473e74ae79e84270c410dbfa915c08a

  • SHA1

    17d7fe7618f15c34f59371c84197533247cc05c7

  • SHA256

    69d1c46d414c08605af9e0204f2e57e279a03b383156e0d6793fe180c5601062

  • SHA512

    e46ee56a9dd432f9516f61f60e626fcdf16f64019fc54561f6d2de2f5a159e455ae3d0833adf249aed5af1e1da1d20c85817aa6b860b38577deca6381fbd6930

  • SSDEEP

    1536:N55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rG:lMSjOnrmBTMqqDL2/mr3IdE8we0Avu56

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-21_3473e74ae79e84270c410dbfa915c08a_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections