General

  • Target

    2023-08-22_43b67527e99a7defef164738efdf4570_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    43b67527e99a7defef164738efdf4570

  • SHA1

    4699daa3b4b7b6dd3ddbca9e7c36f4431bbb5252

  • SHA256

    51183922030acadf8ffc84dba83fd39db03657708afd6634d424b73677b0bb43

  • SHA512

    957d6c6e289d4f6fd3954c3562ef2653e3a7943712bc642da3e84ee92a01043fa6b72393d424b2d0e16bb5c3e1b14e3c2bef4047fc5e83cd039fde559a0b8cbf

  • SSDEEP

    1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-22_43b67527e99a7defef164738efdf4570_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections