General

  • Target

    2023-08-26_f0cc43d4343666ff0501b0216009b9f8_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    f0cc43d4343666ff0501b0216009b9f8

  • SHA1

    c7e4022c1d251f9b6c6fd0c0f73f252198816e7e

  • SHA256

    7093d2aedbde04d7014bb613453f2113f4ee094a902c9053e0a61e0060e78511

  • SHA512

    169ac764aaccf4a68abf93ccbec2845c85f129fe32c26b91a28b27fb26eb99c48ce5dee65f819815194d7b1e35e51f9de626fd697d70542e1451943a76ba0ae4

  • SSDEEP

    1536:L555555555555pmgSeGDjtQhnwmmB0yRMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r2:MMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-26_f0cc43d4343666ff0501b0216009b9f8_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections