General

  • Target

    2023-08-27_614dc22b4eaddcee6e2a859405a271a4_gandcrab_JC.exe

  • Size

    194KB

  • MD5

    614dc22b4eaddcee6e2a859405a271a4

  • SHA1

    f70bb8db21a644d3f0e4f398374fbe10ffaa182b

  • SHA256

    8bf75fed302e8a2ddf9fe0e7fb9875d6075dd4ad1ecdcf52442d194c4999ad91

  • SHA512

    d353f5c84df8965e3a26b1dcb4e1680d35581997c1bf98514b2cf3ec9925d82b2baae22d0be63f120a9ffad6cd82ea3046a3f1b6a868cd72a3f531e40d3c5aff

  • SSDEEP

    3072:YD9tBYvyqQeyj6jVbOPP4MqqDL2/phDMkcUkIwofej9Q7WWdE+FBaDmh8Cohxgg9:6tfjIsPzqqDL615vdmd

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-27_614dc22b4eaddcee6e2a859405a271a4_gandcrab_JC.exe
    .exe windows:5 windows x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections