General

  • Target

    2025-03-26_685179a085859107c56313f70d6c8b3d_gandcrab_rhadamanthys

  • Size

    73KB

  • MD5

    685179a085859107c56313f70d6c8b3d

  • SHA1

    873528c6b83a21739e7371068d57eef95c306244

  • SHA256

    7b972cf052a5608ccd73b40c8b92052d64279761d6b52d4da251006338dcbee4

  • SHA512

    6ed7a713354f0af2ede6ecbc3af834d288af3afbcfeab8eaa62b65bc3d403e346a6b8cd0c6978f8fdfdc86417ec62e3a618fb1412abc0d4422356be0fcb63994

  • SSDEEP

    1536:jgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:jMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-03-26_685179a085859107c56313f70d6c8b3d_gandcrab_rhadamanthys
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections