General

  • Target

    5d3bf571b1899d8081dddccb32eaf8f2_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    5d3bf571b1899d8081dddccb32eaf8f2

  • SHA1

    bc6d7eca7fab12b7639ff8e42d35280f3c6d5f78

  • SHA256

    869db94f8e52bc4ad99723a0bfaba1c7aa8b29f726c433221b8570440f67ff44

  • SHA512

    c552b6c57e0ee461460d5c48957aa8af98bbd5658b510f8f64310c0178a5f42d8ccc6436c1ab73aca68dd6f9e00bb63d9bf10a20be34ff009dd49953bfba5d53

  • SSDEEP

    1536:RgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:RMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d3bf571b1899d8081dddccb32eaf8f2_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections