General

  • Target

    2023-08-22_4f9c51bf2781e3899b419e63af7eaadd_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    4f9c51bf2781e3899b419e63af7eaadd

  • SHA1

    3bb11454782aca75b0e9204b48ae0907126613f6

  • SHA256

    93834fc2bf6858edc25e922fe0c60635e5210b052d396c886eb10ac0ef9369d0

  • SHA512

    eb71768443ed6ca4de44e961928df03e76e68d01d0bdf91a965519b7924ec6ab4a0d0d903bdc208d26816729d875015eb41d31dfe91cc2a8011d37fab157765a

  • SSDEEP

    1536:d555555555555pmgSeGDjtQhnwmmB0ywMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r:aMSjOnrmB4MqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-22_4f9c51bf2781e3899b419e63af7eaadd_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections