General

  • Target

    2024-10-28_058e3a4b34ec36bca2d5db67329bac94_gandcrab

  • Size

    73KB

  • MD5

    058e3a4b34ec36bca2d5db67329bac94

  • SHA1

    d8d7bcc0e116f9a1bca52a186211b91c94651a2e

  • SHA256

    6912d8fa24578e8621854852d9a27ce7c83fcdf36676d0b7f2342bab3fd223ca

  • SHA512

    e331ebc036e9446d6e14e6423472dfe3055c2d47f48cfd4717b8e07845e9bce5b5b61bacc5db8d4a203fe0e1de3710ead57a9ec213a56543c32e3f0be2429e84

  • SSDEEP

    1536:355u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:zMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-28_058e3a4b34ec36bca2d5db67329bac94_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections