General

  • Target

    2024-10-08_e27e962fd96ba03e8c22777cd47319f5_gandcrab

  • Size

    73KB

  • MD5

    e27e962fd96ba03e8c22777cd47319f5

  • SHA1

    9c18758ce132ccdda20ca410f55aa315c2922690

  • SHA256

    01115ebfe5600f4dd65b0e3eb00262b05f3a5f3f0d7ef674670075dc4ba86a24

  • SHA512

    f3bf3e1cf87e0364fac0a21eabc4c9150d4c8dd9c093e4f0ad54b8856997440c4ccaa5e9438ed01fcd9c35bc47876247b5bf3a4f7b9bbbbb8f1cd8d290de086c

  • SSDEEP

    1536:055u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:mMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-08_e27e962fd96ba03e8c22777cd47319f5_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections