General

  • Target

    5e74c65006d65a678354ee38df54fe11_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    5e74c65006d65a678354ee38df54fe11

  • SHA1

    0628ca119de33cdc3b57f3522da54e508e8019f9

  • SHA256

    19cb9f83955e9fb874ac972f7e2b6f4e5f7f8b6b0f66f9ecc59877143249e2de

  • SHA512

    0b1572fb6a6bab2eda4f9a5b3e0c253b1078082fdcbdbc7e36955f1cf74ef127cf0f7d278db57acbe69dfd692618093014ef1645eb70a25f7f163752eeb94264

  • SSDEEP

    1536:E55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:WMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e74c65006d65a678354ee38df54fe11_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections