General

  • Target

    2024-11-18_b9c0ee2976d70b2f65f01d6f2bef7219_gandcrab_wapomi

  • Size

    90KB

  • MD5

    b9c0ee2976d70b2f65f01d6f2bef7219

  • SHA1

    ed34ecfd9e73e42e3154f69575ed80c78ae69001

  • SHA256

    e26f50050fdfba05ea616d6469f919d154c730a2aaa9f4e2ed643e0c2e1e58c6

  • SHA512

    a88c451f81472a8d0d99356fd33cf5c7418fb395498acec054b27c08472917e0c2e2cdeba7d563304cf8c5a215993c9bc1484cd5481c255a2e2e92a74a7c6297

  • SSDEEP

    1536:w555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:NMSjOnrmBxMqqDL2/mr3IdE8we0Avu52

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-11-18_b9c0ee2976d70b2f65f01d6f2bef7219_gandcrab_wapomi
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections