General

  • Target

    61e99515b7703360b5cd64755e345a7e_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    61e99515b7703360b5cd64755e345a7e

  • SHA1

    1a317c8b3a5570d216b622a8ee11edfe092520bf

  • SHA256

    c7fe7e64ee494deea67cebb1b6696dc0da19f5d715912ad95716873643e533ac

  • SHA512

    53081ad811b25a5609621b86a9d181a8b2f01c21c21f2ba529a44875a3e35b6c685197feb5248439c4f5ac8c87e1540f21a46b068cda2a7c2ed9b6e4e306cb32

  • SSDEEP

    1536:B55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:pMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 61e99515b7703360b5cd64755e345a7e_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections