General

  • Target

    2023-08-22_40b3538ca76b4f7b29756b8a4d87d890_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    40b3538ca76b4f7b29756b8a4d87d890

  • SHA1

    815baeae87c6eb875109290d386862734894a32b

  • SHA256

    fa0c328a1f2c3f9bb32e8736f5846975839ae995cfaadd6b09fd03f0fe555fc1

  • SHA512

    6f897552c32e24ebdba408d766a8bd7c04f7ce489d57fb31f75548304ca06d2b3746c3f691f6d2fadf002e2a346a91d686d6fc0eb937551b90802b7678c68b60

  • SSDEEP

    1536:A555555555555pmgSeGDjtQhnwmmB0yBMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rE:9MSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-22_40b3538ca76b4f7b29756b8a4d87d890_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections