General

  • Target

    42ca9c7562f8e572f48208746c0668bc_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    42ca9c7562f8e572f48208746c0668bc

  • SHA1

    7f81915874227aca27e34ee9bd9aa8f35cd9ce4d

  • SHA256

    45f2d21536b6c99465ab3c08d9a8741c0fda3de0b82d3fb51322b5c2643bfcc5

  • SHA512

    752ecae64cbb9e2108615a1bd25c9b1552287761fd9dd3d56e7315f96968cba61bdc495fd9c8609f6287dc17c73f80571e2311bd7be2d4eaf8d2d36c61450438

  • SSDEEP

    1536:I555555555555pmgSeGDjtQhnwmmB0yH3HMqqU+2bbbAV2/S2mr3IdE8mne0AvuT:FMSjOnrmBP3MqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 42ca9c7562f8e572f48208746c0668bc_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections