General

  • Target

    2023-08-26_1f8c7cf917842064bdf31561722758d6_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    1f8c7cf917842064bdf31561722758d6

  • SHA1

    6f4d87647472a460945b224eb2e02df8d2c56bae

  • SHA256

    d65e31d0695de03ce9f3d9925fafa5b413cb4fc122a45aa7bf5baff8de3fb795

  • SHA512

    fb479e1ff2d9bfa397183bc9550c01f8b47fdd862988730db52e7a6e4031decd96afa74bb18d9d26e0c8237093d0c724fe4a4260db8d0196d16e5bdff4cc8867

  • SSDEEP

    1536:9555555555555pmgSeGDjtQhnwmmB0yRMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r2:6MSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-26_1f8c7cf917842064bdf31561722758d6_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections