General

  • Target

    302c2787327f6f4cc3672ab41489cdf3_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    302c2787327f6f4cc3672ab41489cdf3

  • SHA1

    1d1dd0bf15adb2547b5c1f26d287bbf73ca11b85

  • SHA256

    7dbc445766fa1e3ab92f0cec9e020cb0a6191943bd754f11c4e9bff22d3b9148

  • SHA512

    b8494fd28b91dd4dd41c1f8a8fefeac8ea89f294d37a999213cb57aaecb7b13ca81b24f5c4eb0f581036fd2249f6d446c8be22fd64abb4cf351f90efaac4288b

  • SSDEEP

    1536:y55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:IMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 302c2787327f6f4cc3672ab41489cdf3_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections