General

  • Target

    2024-10-20_5818e4d3dcd75fdfadaa8b451d1e27c9_gandcrab

  • Size

    73KB

  • MD5

    5818e4d3dcd75fdfadaa8b451d1e27c9

  • SHA1

    572d8d0d2b9cf02b6666658b3972e5f4083be147

  • SHA256

    2fe39848522a033d1a292afe9e41598f24c6287f63293d10f67e0f5cf6f042ab

  • SHA512

    a2603b1c6b57806d3e6630c9120474c4c8a254fc4014d89d455e53373fa0b9cffa399bcdce92abe52d0ef7eae7bc3c1eb7156204ebb18dd18e5bb934919a4ee1

  • SSDEEP

    1536:R555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:eMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-20_5818e4d3dcd75fdfadaa8b451d1e27c9_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections