General

  • Target

    2025-01-24_086d7bee5d9349b2561d366932ab8200_gandcrab

  • Size

    73KB

  • MD5

    086d7bee5d9349b2561d366932ab8200

  • SHA1

    6a73897e90fa57e9e7e72c1911656aa476735eca

  • SHA256

    c76f054252ae876a2b7abc06a15f39259e7fe9da2a3d47dd903105e53f6c66f4

  • SHA512

    726c34a0d80e6db22f69ac41ad049a3db6bcd5b0afa160b3af01160269d28bbc89e831d302cbb482da9017373ac4a1d55a540ad62a5bdfaec1743aa250613185

  • SSDEEP

    1536:755u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:HMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-01-24_086d7bee5d9349b2561d366932ab8200_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections