General

  • Target

    2024-06-20_57bfea7b2273de049a449c29d9cf26e3_gandcrab

  • Size

    75KB

  • MD5

    57bfea7b2273de049a449c29d9cf26e3

  • SHA1

    cea2c1df177dc47e73afadc96ca1d8dbbd7de67f

  • SHA256

    6093cb81f0b09599ffaf6b7859692021cd68165ebdd659681651d931df7c97c3

  • SHA512

    1f2d2c994410034e2617fd69b3a097f6205fa9457b4b892a00bc136aa4e4a063a3e60eba8c94038707b54f27f1d40ac809d72cd76338b4d3625b9505c3457ae9

  • SSDEEP

    1536:o55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rB:qMSjOnrmBTMqqDL2/mr3IdE8we0Avu59

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-20_57bfea7b2273de049a449c29d9cf26e3_gandcrab
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections