General

  • Target

    2023-08-26_de58ff6f4e25945d7cd8dcca8d71a7f9_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    de58ff6f4e25945d7cd8dcca8d71a7f9

  • SHA1

    617c7757bb2997e2cf07ded47286905c403d5251

  • SHA256

    0ce6e1fdb1779127df7b0c905d1a92e645367b72c17b9b4be5a3042c347d2ec4

  • SHA512

    8017fdc4ee484911710ce4d9f2b504c351f0118be26560bbcc29cd0e002357387778ef38cd3fcb545c839c5e5d41e85aebcc374f288f3f9511f4c8721744e7e4

  • SSDEEP

    1536:Q555555555555pmgSeGDjtQhnwmmB0yRMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r2:tMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-26_de58ff6f4e25945d7cd8dcca8d71a7f9_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections