General

  • Target

    2023-08-22_57aadc5a96442b0f80e7ffab88539b86_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    57aadc5a96442b0f80e7ffab88539b86

  • SHA1

    f710011e3c47a7b62a0dc61cbf336a767bb4fac2

  • SHA256

    d1eb660e38dadd37b552481b2d0c4c120cd65e5ecd4113050170d1bafbe7849d

  • SHA512

    0afc7141c0bf190e7251193f1bf2e01b745788a7dfee96657d069d52edd41956a0daddf24252086bcac3d37e19234c2e6808648a2db4621933492921143dc226

  • SSDEEP

    1536:c555555555555pmgSeGDjtQhnwmmB0yuMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rG:ZMSjOnrmB2MqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-22_57aadc5a96442b0f80e7ffab88539b86_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections