General

  • Target

    2023-08-23_2d75af384dd375bd01eb8b0342369a4e_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    2d75af384dd375bd01eb8b0342369a4e

  • SHA1

    4f1d2c7f3c69e3bf222f5a8ba2234dfc38194cc9

  • SHA256

    4c0251572fba179298472d88c38767e6e980196cdb30af863ed5e6354f368a90

  • SHA512

    d85c2b1ff85df64a25a9c3c297fcc6e1e66e5c1496caee39658163cc4e8fb7a8bb959592c98376ddea5f2ed4dfc994e07c25a64425af85311b80b92f509d6ded

  • SSDEEP

    1536:wgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:wMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-23_2d75af384dd375bd01eb8b0342369a4e_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections