General

  • Target

    2024-10-09_0372a508fb859eafa09df8a5f122393f_gandcrab

  • Size

    73KB

  • MD5

    0372a508fb859eafa09df8a5f122393f

  • SHA1

    8ef9f9f2b2f160547d195e5f5c33b0b16373e0e1

  • SHA256

    be9ea5ec107078def9b6fab37891cdec3ebb6a6910b7580ff155759a5ef22dd2

  • SHA512

    05a0b35f02af4f1c35c2d54240c87383c92fd69a4ba0da62bb9409e81753910e6610a476a6d6a02d287520f6946660c3a946cd3ce2f8ab41939cb65bfe7d10ca

  • SSDEEP

    1536:s555555555555pmgSeGDjtQhnwmmB0yLyMqqU+2bbbAV2/S2mr3IdE8mne0Avu5G:JMSjOnrmBeMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-09_0372a508fb859eafa09df8a5f122393f_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections