General

  • Target

    2023-08-23_0f7234aa72b270299dbb062e59b60a22_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    0f7234aa72b270299dbb062e59b60a22

  • SHA1

    9d04de6ad203002617fbf55a7e073946c78a828e

  • SHA256

    c0644f38916dffbf007b76244b7532e9f382f8208b93f2243a8ff8d797e04d59

  • SHA512

    f7a872d43a1ceb939cbd3161a61ff513ebb174b35259c1272aac169087bef6186b935941a203168b9174e5b8eaa671981bc808965802cf8503bf6386ae0b6ed1

  • SSDEEP

    1536:4555555555555pmgSeGDjtQhnwmmB0yVMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rG:VMSjOnrmBdMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-23_0f7234aa72b270299dbb062e59b60a22_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections