General

  • Target

    2024-10-09_981dde72d6e51db9decf2b83d9a7c673_gandcrab

  • Size

    73KB

  • MD5

    981dde72d6e51db9decf2b83d9a7c673

  • SHA1

    9d26e577805b8ad61436ff4b1648d91e46693134

  • SHA256

    c61bcdc5fcb811dc52b058e77416b6a96149e2ac5496b5a5485a3f28529e5c16

  • SHA512

    4155ed8c48b711b099ad11870548edae2b95a937f00826ea0beecc6c8399e81cdf7f378c3abdd65438a1d012c0034c5c7124fbbc095cdd069eb7472a8b664299

  • SSDEEP

    1536:8555555555555pmgSeGDjtQhnwmmB0yIZqMqqU+2bbbAV2/S2mr3IdE8mne0Avu8:5MSjOnrmBJMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-09_981dde72d6e51db9decf2b83d9a7c673_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections