General

  • Target

    2024-10-09_c7814cf2e1c4f281654ea49de03a8e3b_gandcrab

  • Size

    73KB

  • MD5

    c7814cf2e1c4f281654ea49de03a8e3b

  • SHA1

    818c48ef76630209e12d7e0e47f9458caa1509fb

  • SHA256

    f3c5921f4e70bc94aef271654d814111b053e70c783278bc7ed6ad655e1d1c3d

  • SHA512

    8fd54f532c9bd4292a3a87f76e240f0a5b9d495c342d969df14dd8267b76ded88d8f1200358107a60946b183825bc4c52c1de3605babc53512b1a548b2ddd5f4

  • SSDEEP

    1536:S555555555555pmgSeGDjtQhnwmmB0yxMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rZ:DMSjOnrmBZMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-09_c7814cf2e1c4f281654ea49de03a8e3b_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections