General

  • Target

    2023-08-25_6139375ccd9204459c2a48ad68520cf5_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    6139375ccd9204459c2a48ad68520cf5

  • SHA1

    fc9c7c61c101aa7c1a61b32306d56f57bb07da1f

  • SHA256

    e8bc5a90cfcc9949308e43fa6f1d2a9c86d6eb0708944201e034ba880eb71208

  • SHA512

    6f8b62b558b0dd17494dcc0ceaeacd92606f1f3cf778952b8a9ed595c348b555488538a46e6c977332594660080f3eab04fb060a6f0015819ab843031fbe4bc0

  • SSDEEP

    1536:s555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0Avu7:JMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-25_6139375ccd9204459c2a48ad68520cf5_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections