General

  • Target

    2025-01-16_69bdba77851768f192a5da3a95370da8_gandcrab

  • Size

    73KB

  • MD5

    69bdba77851768f192a5da3a95370da8

  • SHA1

    18c5be418172545fb91cf7426cafa283118848ca

  • SHA256

    653ea58908c5fa7be1724e05f6c25546a4ffee244fe00a4e82be1b5c8aaef0d6

  • SHA512

    df33a3a270c0367ead88b8e0a64867bd2bfd2c4612b35a9b96c24787e869fb8fdb5df380896f4d8a9ba46f3706206035db2fb26aefcf2e546e95a973e19a90ca

  • SSDEEP

    1536:C55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:4MSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-01-16_69bdba77851768f192a5da3a95370da8_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections