General

  • Target

    2023-08-05_f7fc1d813907f416595eac64d7d986c6_gandcrab.exe

  • Size

    73KB

  • MD5

    f7fc1d813907f416595eac64d7d986c6

  • SHA1

    68d8d47704331ee3a01455596b3d747f6b87c198

  • SHA256

    87bde727af7beabcb4d733a41d258ee407d6e977e78c06a96ba2295431d53c23

  • SHA512

    0ed24a328323dc63a560cccf162ffe21c55242418f49eefd3a88c49513343f2c23ef690a8999dd402fee09ec9335ae05ee10666dac5eac4c13a948358b04cdab

  • SSDEEP

    1536:UgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:UMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-05_f7fc1d813907f416595eac64d7d986c6_gandcrab.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections