General

  • Target

    3e07946ecc58bcfe0f44a1b86834b718_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    3e07946ecc58bcfe0f44a1b86834b718

  • SHA1

    d3fe6e1a2028b1d69c2a3e2b6f842eb158521754

  • SHA256

    c71e8d3b1ae104f4f5d9121bf7892fedaecd0f0fef8e3fed3200286231644bcd

  • SHA512

    aac489f4c7111952acfadec3a8c88ef3e4666611bfffb757340a4e93d130287f0e482911891f6167b8c7943989e7c025871ecbe91f2723ef5e8e9ad495adc9eb

  • SSDEEP

    1536:HgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:HMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e07946ecc58bcfe0f44a1b86834b718_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections