General

  • Target

    2024-12-17_584a42c3611ee9c66c0489e50c07c17c_gandcrab

  • Size

    73KB

  • MD5

    584a42c3611ee9c66c0489e50c07c17c

  • SHA1

    207f31a9ecac7ff81f9930b5693858e60d0c8dab

  • SHA256

    f76f2fa7e9973d77de2b8209feada054e92fbf0868ba1dcb31362590b72c9845

  • SHA512

    f800cb171cfb9c5dd703ba458b46d68a677b7a36e8684f18f7a517ef6254d0d08cef99b6b6d0fbd90642f6417d60b8433f3dc8282e1156375246e3e70f7d758c

  • SSDEEP

    1536:E555555555555pmgSeGDjtQhnwmmB0yxMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rZ:hMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-12-17_584a42c3611ee9c66c0489e50c07c17c_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections