General

  • Target

    2023-08-25_ee2886e009cbf16384840d7b1255d9b8_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    ee2886e009cbf16384840d7b1255d9b8

  • SHA1

    c59cbb4a739b51a872223eff867e329545645e1c

  • SHA256

    1cb3e47df0f2cad594c70eb15abbf4cd8053aaf93a542c14dbae05d781b0a4c7

  • SHA512

    a18dad57f4ce0252e51fe9d842f4b4c5a9e0c9565fe7e93179973f0babf746f32dc7ee2037ab0d975cc5965e9105b63f1e797cd54e0392640b1ba162d6cae1dc

  • SSDEEP

    1536:YgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:YMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-25_ee2886e009cbf16384840d7b1255d9b8_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections