General

  • Target

    3587b59b5f5df632f96ebb1c1dd9c39e_gandcrab_JC.exe

  • Size

    284KB

  • MD5

    3587b59b5f5df632f96ebb1c1dd9c39e

  • SHA1

    87a3265c1a9a4cebf622aed5db6f91d0e8132a52

  • SHA256

    d542a712a04b01fdb1a26086be8c2437a795475a30e9dcfbd595c8044233a2fc

  • SHA512

    8531ea7ae4cd360a4828afe86f9afd9a69d32165ed4502e49461453ad4a9bcf98a0a5f0117e102f0ac14afc5ac6e5a733026b52265feaa904480d7b81b000ba2

  • SSDEEP

    6144:6tTIsPzqqDL615vdmm3PA8UPDCcGGWyol8:YTIqn61/mm3o8MCcGGWyou

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3587b59b5f5df632f96ebb1c1dd9c39e_gandcrab_JC.exe
    .exe windows x86


    Headers

    Sections