General

  • Target

    818254d916f20affd2254e156e32cb91.bin

  • Size

    73KB

  • MD5

    818254d916f20affd2254e156e32cb91

  • SHA1

    e50e8d35957284df86a4a16d118cd8c83fd0dc62

  • SHA256

    ce5d197fa3d2ad070ca03408e80052032c0c5c303af8982b7094952617ee41a8

  • SHA512

    fd5f32c0145056c359310179f2c4f2d4175b944302f5931724dfe3d43d0c80f0a86092db405527d447f7212fe08b627d5c64804a335e4a3938a5adcb3ac3623a

  • SSDEEP

    1536:v55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:bMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 818254d916f20affd2254e156e32cb91.bin
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections