General

  • Target

    2024-12-19_5ec479a2b4223be3ead3a4331da5cb18_gandcrab

  • Size

    73KB

  • MD5

    5ec479a2b4223be3ead3a4331da5cb18

  • SHA1

    7a69a63f7ae441cf51f8ad28a4450e01bdf51dde

  • SHA256

    5afa869d4c33c707e60d0ec028236f2a16a6bab0ba2d5ceb5635cbc359b3a77b

  • SHA512

    9705ca06fdbc29c635dfa5188b25683f3dec775277ea51f0ada89426ff6820b114128e3ce617b4bdf4e3cdb4a6dd32b73661bc5c02bf3cbdbe487c9a67753d97

  • SSDEEP

    1536:WgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdvd:WMSjOnrmBbMqqMmr3IdE8we0Avu5r++P

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-12-19_5ec479a2b4223be3ead3a4331da5cb18_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections