General

  • Target

    2023-08-25_61becb69cc658c0478d5c628dcbfbc7e_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    61becb69cc658c0478d5c628dcbfbc7e

  • SHA1

    8ad85866b1f24435b25ebe63069e38dc06302c8b

  • SHA256

    2dc6f8eea21985256853cdf17fff6db7220381f64ef0dbb65889b97f986c0923

  • SHA512

    6169bcdd625dfbd352aa024da4d4246d26d15b409a57b4ce440b763e4c34ee1ca140876934f8ee769650b8ef3303c6435356458f5ce9ddd3c76b9a03cb697832

  • SSDEEP

    1536:lgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:lMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-25_61becb69cc658c0478d5c628dcbfbc7e_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections