General

  • Target

    2023-08-22_c424e6784424d9f0e01ad505bc0ac1c4_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    c424e6784424d9f0e01ad505bc0ac1c4

  • SHA1

    182858dca7c3f775a10ec5c70907ac9b0d8d8c6a

  • SHA256

    eff38618d6b4f620a55054622ad0253d101d3eb976d9a20c4d748a4ae973fff2

  • SHA512

    69a826ae8b6e3931738a65404b13f0c4941c05c00e572b1df647ff990d2f67da2addc66ba415a6187ddfaf3703c2e24ab9a35a561c95ddcac1b3a11a02d1f297

  • SSDEEP

    1536:CgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:CMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-22_c424e6784424d9f0e01ad505bc0ac1c4_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections