General

  • Target

    2023-08-23_184becb68124bf04cb59b78847a22858_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    184becb68124bf04cb59b78847a22858

  • SHA1

    b86ea04a508389af648305d405b29b1ba1afbafe

  • SHA256

    f2ed5a26d428855479f380e0a7d71961386878e77a83d871d5aaa040685614d8

  • SHA512

    79de9e4518e7dac8d688b4a6048d595f1c62dbb191c729a676825f9d453d65a18d98e67339ea786e3fa1dc97c0610b907a2d63eec1f56e58e658413f8e5a98db

  • SSDEEP

    1536:1555555555555pmgSeGDjtQhnwmmB0yRMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r2:SMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-23_184becb68124bf04cb59b78847a22858_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections