General

  • Target

    51943e82e39090380996c29055668c8c_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    51943e82e39090380996c29055668c8c

  • SHA1

    a1b33683b20057f63089cda781726d044dcd57d4

  • SHA256

    c0b4aef37b0441975cc0322267a28485555496ae9394797088ccb93c62671870

  • SHA512

    4adb6f8bf840e96c048c0bf29477a1793644bf870e86b8294194e6fcd18c065fa3be93dbf09dba1f7273fa1b03c3ce8d1c49cc08e98b5134597f3d62e79e1ca0

  • SSDEEP

    1536:I555555555555pmgSeGDjtQhnwmmB0yXMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rC:FMSjOnrmBPMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 51943e82e39090380996c29055668c8c_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections