General

  • Target

    2023-08-22_599589ad804fc6ad0c447c913cb5aedc_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    599589ad804fc6ad0c447c913cb5aedc

  • SHA1

    e8e33a46d0d38a3fafe9c4a84b015d4383a4ffe3

  • SHA256

    fb5de8b763b1d1f1e1bf5beab657469aa10b1876f1cf5c92af62ff4461a74489

  • SHA512

    c98da7518af6094c4c6de653e168d630aa202b15db1e8ffa6fcbb72ecdd6c31b45a67c83d79f31c7d2b504c3e6b367f9656c387159f0391ac00b4dbdf1dcf411

  • SSDEEP

    1536:V55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:9MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-22_599589ad804fc6ad0c447c913cb5aedc_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections