General

  • Target

    2023-08-23_07918eea315812c1d423b1606f86cbe4_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    07918eea315812c1d423b1606f86cbe4

  • SHA1

    e3aee9f853d0e938057aa3faa330eb006a528bab

  • SHA256

    408b6701249926366ede6042e6ce973f8f06b16a3b948f829020a4dafde9fd71

  • SHA512

    38593fc07b028e71885c625bb414c16aa37ba06ab41d2e1c7860be1b1261175215dcf96d0b00794fefc8a4eed7719acfe8126a856074723ae82359e114564266

  • SSDEEP

    1536:b555555555555pmgSeGDjtQhnwmmB0yRMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r2:8MSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-23_07918eea315812c1d423b1606f86cbe4_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections