General

  • Target

    2023-08-27_06659de4140e19b750dfe0482c3cb75f_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    06659de4140e19b750dfe0482c3cb75f

  • SHA1

    5257d40857561363d00f71a61d11fd83f050be49

  • SHA256

    d786a8d2f9f7cc9928ed6bda4261c4c1350f6089ae2d7e11133ad393e73e03e5

  • SHA512

    6d37f3eb39b017ba75f679c8ba4add16ad11673a77f3b53c74b4f5cfc920ca67023ccfe1e56946e37773a3caefb0c4498e3b544fea64d27ddc319d0a421c0b9f

  • SSDEEP

    1536:hgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:hMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-27_06659de4140e19b750dfe0482c3cb75f_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections