General

  • Target

    2f60ac8a56a049f898795939e76d2ca5_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    2f60ac8a56a049f898795939e76d2ca5

  • SHA1

    2a972d2b908edb2eaecd34458f1605987fc7b2d7

  • SHA256

    0cb87878c411f1dcc65efa99297d8addc88c2a3d57a59e715e383290ddf99ef5

  • SHA512

    b74775de335c3b4bd21dd0422b9a03e34356432cb786d083a0827e8c5b66acac546cb392718ce5d931d4890ccc46b35e8573d7e584ba47b52e69fe5b36b56860

  • SSDEEP

    1536:Y55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:6MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f60ac8a56a049f898795939e76d2ca5_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections