General

  • Target

    2024-10-18_f29473c787ce9e0754ff95f6d078fb16_gandcrab

  • Size

    73KB

  • MD5

    f29473c787ce9e0754ff95f6d078fb16

  • SHA1

    4854e4b5c6f5a2d555a78ef4c519bd32617f7ef6

  • SHA256

    befdddab3c706b855dc151b12b0507ba951d3147f15f37eea8f8409f9c7c26f3

  • SHA512

    70b415e09d3eccb36bdb13ea9524f6d39bc0c82bea5a2c5c8edf3ed6efd0a2b6ccf71af88574f9e78a789123f3d600ff3c3e8f2df89698cb1486d6c94fd037b1

  • SSDEEP

    1536:4gSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:4MSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-18_f29473c787ce9e0754ff95f6d078fb16_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections