General

  • Target

    2024-11-24_5a98aa373722ceb123d2fcd2a784cb71_gandcrab

  • Size

    73KB

  • MD5

    5a98aa373722ceb123d2fcd2a784cb71

  • SHA1

    cabcfc7e64c4b8f317b175aaea121a607a0b99dd

  • SHA256

    3bed716d62bbd1e058c9596ae6aad7113cd46233ae057a42f61b9cc0c584d982

  • SHA512

    62c7df2d9ddd81c60746865dd7b06ad06a33ac7af4072595a5b77b0ba6bb0df3863199e5ff2a7857afc30732c06a0635430a088ea23e59de3f057d4429dd49ca

  • SSDEEP

    1536:g55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:SMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-11-24_5a98aa373722ceb123d2fcd2a784cb71_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections