General

  • Target

    3fc9bc794f6262ea7604545192b38e56_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    3fc9bc794f6262ea7604545192b38e56

  • SHA1

    c9822ea0a387f59f03a926263a1e24567ba9275b

  • SHA256

    4e6a967b03928518e2931faf39eec24d2fa8ac8c388319c69b2ab1536d1e9956

  • SHA512

    11b0d1c9d991daa5c0c240dc521f776ec2f1855d601ce94789c7413d5a43a29d554bb9f540f69bbfb26c59993852deb57aea70e51fd97e3dd7490c954cc6e11c

  • SSDEEP

    1536:p555555555555pmgSeGDjtQhnwmmB0yl4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5+:WMSjOnrmBd4MqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3fc9bc794f6262ea7604545192b38e56_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections