General

  • Target

    4e521e584cdfa5084d005553c1d81faf_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    4e521e584cdfa5084d005553c1d81faf

  • SHA1

    57da7d8efe49a52b5d726de70ee1b27154dbf111

  • SHA256

    899210b77ad97e7be0cf4208d4342ddc59e8e665c3ff9cd05880aa19e8911445

  • SHA512

    590308fe46f8d3df497289861dafac2d14cefa3d6904f2cc6581e6f940eccc3b29657ce7304b6c3c5b65f2046b09dc8d80c3992d0f1cf9552804ae622b92617e

  • SSDEEP

    1536:ogSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:oMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4e521e584cdfa5084d005553c1d81faf_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections