General

  • Target

    281f034921e9a9c9495aa7e28ff30c4e_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    281f034921e9a9c9495aa7e28ff30c4e

  • SHA1

    98e7d4f32d85454bf8fd511926633c2355eaee92

  • SHA256

    4d8477b9c6cf2a15875ed7a5bc13fe62b24da0249c816fba5e3edf73828823d3

  • SHA512

    4e568ec23aaaea6dba9ee641dd0471a9d2c4ba1ee5971201bbda20bae33f9fed992255d6a7f439c9f842e04d0e17dd793adde8b208b095e5329f43824ccff70c

  • SSDEEP

    1536:F555555555555pmgSeGDjtQhnwmmB0yl4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5+:CMSjOnrmBd4MqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 281f034921e9a9c9495aa7e28ff30c4e_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections