General

  • Target

    2024-10-20_0f534568b0a55a484c6a93f182d1a7e4_gandcrab

  • Size

    73KB

  • MD5

    0f534568b0a55a484c6a93f182d1a7e4

  • SHA1

    3db2e8cc82042de5617dfe7f099c17926abe0ef7

  • SHA256

    3240ff7ade60243788177fc958739aa7a51e8d6a9abf17da15b066759bc224fb

  • SHA512

    dea6f8803f462eaa89fc57747505e9ae404197d003786e0eb9bd0e6c1ad83bf3acdb811ea3b8cf28d5fe6bee7c0a31ee737f0884991a7f92e8c9efd8e5d0ed3c

  • SSDEEP

    1536:555u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:RMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-20_0f534568b0a55a484c6a93f182d1a7e4_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections