General

  • Target

    2023-08-22_69ad8fae9978495693b6a6f55657b576_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    69ad8fae9978495693b6a6f55657b576

  • SHA1

    d998431e66cd2678dcaed0a2ef50c3a1a6261cf4

  • SHA256

    e3f5e0689c60b46ab7c0af13e739a66f0786c315a3de74d89b65420d6a554892

  • SHA512

    57b82a6792ddc3d6306c2a16fab16e96606dd0b98693c54c918e1451a1b9b7ab0615ea9da2bcaeeaca97404006ad51e93371499a6a4b81e95247fc0243e2f74f

  • SSDEEP

    1536:o555555555555pmgSeGDjtQhnwmmB0yyMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rK:lMSjOnrmBaMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-22_69ad8fae9978495693b6a6f55657b576_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections