General

  • Target

    2024-09-29_e715d339f54ed9cc3f1a1a2e0581b638_gandcrab

  • Size

    73KB

  • MD5

    e715d339f54ed9cc3f1a1a2e0581b638

  • SHA1

    32f0fc66d53ae706ce097a4a91429322cd1cf778

  • SHA256

    1f092a7b1cd4e6fd7786033cda60a6bb23b5bed23c0389014e0380765f7c100c

  • SHA512

    da2ae6c35e0d34e1439f3a8e89cbb64c814f8ecab2fd29e8e9c0a300796ba0c984b7f63527d3c9a8d182781eaae995f3a481eed32d10e8f667436cf5f8b6653d

  • SSDEEP

    1536:7555555555555pmgSeGDjtQhnwmmB0y5MqqU+2bbbAV2/S2mr3IdE8mne0Avu5rE:cMSjOnrmBRMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-29_e715d339f54ed9cc3f1a1a2e0581b638_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections