General

  • Target

    2023-08-23_2f6fc849a3a0d163c7aaaa425434f66d_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    2f6fc849a3a0d163c7aaaa425434f66d

  • SHA1

    ab3586b773a110691aa8a2c2c41188ba45476704

  • SHA256

    b7fc2cf5f912f529921622e8d3819d26600a9da47bce46c862ed5daed85fadd1

  • SHA512

    7a735745e99d8fdd67b011a5a3c4baf3773f045898ae8ddee5a970d89b4600d607a0170a3611b220bc19a0e8f0e740575484b8af36bb1cc44b0076ff8d2c7045

  • SSDEEP

    1536:ngSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:nMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-23_2f6fc849a3a0d163c7aaaa425434f66d_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections