General

  • Target

    32131e40f700acd7e424a7bc1d0ad2be_gandcrab_JC.exe

  • Size

    252KB

  • MD5

    32131e40f700acd7e424a7bc1d0ad2be

  • SHA1

    2ff64f6af3673fca961af09d6565e6ace6640524

  • SHA256

    ad3718cf09b459c875aa1bed1ead412d5738a9af688a6b7c9d5c9d2711c3ebad

  • SHA512

    bbfd4a51fdb6951a0cc72c49445f87f4c0c8e2cc3f50e53d278a8cc23727511b1a1bca14da288fe2f783e3be935c264f546661db2b6f20dcaafea7b2e281ca43

  • SSDEEP

    6144:gXjOnr6+qqDL64vdbD3f6mP+pmplO2oS8K:gTOn6qn6cbLf/+oy2oS

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 32131e40f700acd7e424a7bc1d0ad2be_gandcrab_JC.exe
    .exe windows x86


    Headers

    Sections