General

  • Target

    2d1ce8d0e9522dcbbcab0f2e9448e184_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    2d1ce8d0e9522dcbbcab0f2e9448e184

  • SHA1

    8a752ce841380ed77d5b9341d1d0cbe7758fe6a5

  • SHA256

    eacace4f3feebc232d8757655e464a336d945c31d3e64c68ded3069134bfae4f

  • SHA512

    1acefde39f7334944a52b09add0d5a0d8233742641dc43f7aff4919ed9ed2f8dffe64d3942a22e1140a24f6bd4d17429970113bf90e880f5cef6c1c8638e3c34

  • SSDEEP

    1536:f555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0Avul:AMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d1ce8d0e9522dcbbcab0f2e9448e184_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections