General

  • Target

    2024-09-27_4fd7531827e7a7a480fb8c05101292e6_gandcrab

  • Size

    73KB

  • MD5

    4fd7531827e7a7a480fb8c05101292e6

  • SHA1

    86e0eda90802d808b2eba6c9131f70d69899ae31

  • SHA256

    f0dc4982d586ca0630a5e6a8c6c2c03aee27945aac998921bed8d701c5dba52f

  • SHA512

    78664815a325f32d4e0de35c644f0b8fd0d54a0aefbe90fb0497e02a43823caf917f3e363935e68789cabec6fe770879903d566560184a55ce87704bdda08407

  • SSDEEP

    1536:CgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:CMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-27_4fd7531827e7a7a480fb8c05101292e6_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections