General

  • Target

    3297e2eb0661279029c320bdf7c5b34d_gandcrab_JC.exe

  • Size

    296KB

  • MD5

    3297e2eb0661279029c320bdf7c5b34d

  • SHA1

    8b3277a9165893adc8c568a50436639e70b63c39

  • SHA256

    e61433b27a895de61e7ff0208f209a82e0f5935dd34d9f55549893d0b0b26939

  • SHA512

    84c7d20ddbdd63b1be41ea87e62121eb4ad736c536f802c2d08ec2047165f9c6234c125e7c2d917be9a29e6d399bff3d94a3d4885b4b0f735255597ea6635614

  • SSDEEP

    3072:YD9tBYvTqQeV6jVbOPP4MqqDL2/phDMkcUkIwofej9Q7WWdE+FBaDmh8CohxggEC:6t7IsPzqqDL615vdmyCcJJGEQ

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3297e2eb0661279029c320bdf7c5b34d_gandcrab_JC.exe
    .exe windows x86


    Headers

    Sections