General

  • Target

    2025-01-04_24999b12642ecd409b86c056d85725ad_gandcrab

  • Size

    286KB

  • MD5

    24999b12642ecd409b86c056d85725ad

  • SHA1

    0d53a3108db3913a2208df4affd8e6d7e14b1d95

  • SHA256

    52ae4c92aaed4cb66f354f34c10507713eb0885d1a4aa1394a5b5386f966a4d8

  • SHA512

    5fe7d98c79f373b7ecd53c3dc45cc1e77d7bb6d44c756dda4f6e933aa219d6e796bec012c6892ce0abfff9285000d1996062452f07229cd0fa5526b88d0d3a25

  • SSDEEP

    6144:+XjOnr6gqqDL64vd0xrm1sSfa7F5pDYD+x/W836eiO/swGXuY2YJ+p3ssqpsYOH4:+TOnYqn6cwrm1sB7F51YD+lW8qeiO/sf

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-01-04_24999b12642ecd409b86c056d85725ad_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections