General

  • Target

    2023-08-26_fe1603feae1e7f95225fa05b05134498_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    fe1603feae1e7f95225fa05b05134498

  • SHA1

    0a28b9d50269d53767da3df825b93b3b74b96ea6

  • SHA256

    4eaf4343b524a0589af3fcd85544648e30f3e0207644af0c864e8ad6350cba1f

  • SHA512

    fd01129bbdf5a42db27c70a5fd036f989ad516aa87670b10d01d4ba5ecb60f6071b8b3717f9809a0c225dbd6edea0bd6e38d36bdf01aabf7d884168959b0ff79

  • SSDEEP

    1536:c55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:eMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-26_fe1603feae1e7f95225fa05b05134498_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections