General

  • Target

    322e01342690408e224b005a0297ff4c_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    322e01342690408e224b005a0297ff4c

  • SHA1

    4c9d0aad97d78cdef52569c5ac8af419e3add0bd

  • SHA256

    c8617cdedfe5651b866e4c631bd704dbfcbe8f33170c497a3be0155aa7c2e592

  • SHA512

    ddf878984473439f8c8ecf00536ef76206cd40c850148039f5dbff6c1dba319c302f00621659eff0673dc7b6596a5a0782307fb09818040bb4282d37d522bc3e

  • SSDEEP

    1536:Z55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:xMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 322e01342690408e224b005a0297ff4c_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections