General

  • Target

    f25585f7175812dd7ce1e9061eb9c572cc88c6983b8a64304759028936ab8ed1N

  • Size

    73KB

  • MD5

    2b83eddcfadafba17d5d6d0752778140

  • SHA1

    bd2e9106b4c65304271d738951c9f765b6f319a0

  • SHA256

    f25585f7175812dd7ce1e9061eb9c572cc88c6983b8a64304759028936ab8ed1

  • SHA512

    d2d4a7a88f592ec164a2898cbd38d5d13f1418374092d797834f47244343b4d5dd7a85a624fb2cd1bec42452df2426a931065003a75dd79cda6c8bde58c4ea85

  • SSDEEP

    1536:FgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:FMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f25585f7175812dd7ce1e9061eb9c572cc88c6983b8a64304759028936ab8ed1N
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections