General

  • Target

    2023-08-26_2c4bda0580dc827ea71781f7193b464b_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    2c4bda0580dc827ea71781f7193b464b

  • SHA1

    d95e7f8686178c13c89d4e41c6da63f7b1a24216

  • SHA256

    5f30171b7efd81a84031331a0764c266d1cf564d7296579e30fb0f4981b3b8a4

  • SHA512

    f211f67f72dbdd7d072a5833ddf32af33698860cceaed7e827df03e959e3366b6e3fb70f18138804bb87e9672af6d6e71fdd3f853791c473313c9f2a12ba2ee4

  • SSDEEP

    1536:/gSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:/MSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-26_2c4bda0580dc827ea71781f7193b464b_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections