General

  • Target

    2024-10-13_435b003fbe0f6aa7735b8dc9c41752fd_gandcrab

  • Size

    73KB

  • MD5

    435b003fbe0f6aa7735b8dc9c41752fd

  • SHA1

    82942d49c5948d33de1b425baa9da111cf9ef515

  • SHA256

    c1279f7e3843d88d4fd9f235cf8efd99e628938c274865d4ba6fc33643fd3cab

  • SHA512

    f5853482e472d5f280c376f691c34e6a4c0c75784e8849bb5d06947dee17c1c9863e8ca4f3bbbeac3e8b2bbd99186310dec3fd54d1bd595a31bd72b14c588d63

  • SSDEEP

    1536:4555555555555pmgSeGDjtQhnwmmB0yLyMqqU+2bbbAV2/S2mr3IdE8mne0Avu5G:VMSjOnrmBeMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-13_435b003fbe0f6aa7735b8dc9c41752fd_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections