General

  • Target

    2023-08-22_99b8a1664f744ece7490e283ad799be7_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    99b8a1664f744ece7490e283ad799be7

  • SHA1

    e229c86d5b7e2c874ffe28a2e2a27c3a6b6796a5

  • SHA256

    bfc39d50b4cbb0271f55e9f6b200cbb680fd5531b1636a38fce23f840eeefce0

  • SHA512

    d1aa552c51e20efc543cb6244f9f4f1c685e6d9ca18ec87ffbe3357a2bd1f47f13583faf6371b7d7617e492aa0e8c846a69423a128dbe5dd54ce3be3c6f80a9d

  • SSDEEP

    1536:v555555555555pmgSeGDjtQhnwmmB0y8MqqU+2bbbAV2/S2mr3IdE8mne0Avu5rN:wMSjOnrmBkMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-22_99b8a1664f744ece7490e283ad799be7_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections