General

  • Target

    29a6af3b854feccd3d638b4f87541668_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    29a6af3b854feccd3d638b4f87541668

  • SHA1

    53013dfbd5182fac1b501a7ee58992d6a7f40b18

  • SHA256

    ab116ab7282d9b469731b5dd9b1b8d6dd1e5b23e988248fc012ffeac425f6b81

  • SHA512

    e8ff15dbbdf4c06fa5b13ca015752b37a1b25b7671b7313d16e2df0afc34f36b1850ee65b97ce2de66434ea428c58f2aba64f5de961c092a59fbe9335757b4b8

  • SSDEEP

    1536:u555555555555pmgSeGDjtQhnwmmB0yl4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5+:fMSjOnrmBd4MqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 29a6af3b854feccd3d638b4f87541668_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections