General

  • Target

    4ef2ca9cff779d12b5079f6827237658_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    4ef2ca9cff779d12b5079f6827237658

  • SHA1

    ee150912cc7fe1782f5b6ac44ac90f2c9cba9b8f

  • SHA256

    6477643aeb891e587ce59d85081a7f93703af8b8299d89efd01f887b257d1586

  • SHA512

    4f1a69d86e180b5aba2aea0215394b3d2144e6c3cb2f1898f2d364f1c85f2af70eea7b080ce895f54587382b0f9f5cec7f02323b24aa7e978f72072ceb72cb31

  • SSDEEP

    1536:y555555555555pmgSeGDjtQhnwmmB0yXMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rC:jMSjOnrmBPMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ef2ca9cff779d12b5079f6827237658_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections