General

  • Target

    2023-08-26_f96438c58b07d07e0c6e82e8922b5a84_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    f96438c58b07d07e0c6e82e8922b5a84

  • SHA1

    514e6de3706d12ae6f8774d0344ef53262fb6b5a

  • SHA256

    8ab922eb017d7ee6ba5254e429becff53408e67b19be7b6b82b141ebf7aa05df

  • SHA512

    12bb2869ca9bd6caf0d3c8dba15168b5139bd7a5c1ef6d40401c7f77cc00ec9d48c1ba72089ce8ec34940a403e6b1b5dd6cd033f293685de65c0f5f786723b49

  • SSDEEP

    1536:l55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:tMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-26_f96438c58b07d07e0c6e82e8922b5a84_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections