General

  • Target

    67c844d9495ba4d3648b333b34ffdcdd_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    67c844d9495ba4d3648b333b34ffdcdd

  • SHA1

    cb686a7951e165b2dc1c0dda53cf57d864995238

  • SHA256

    3056a8981aa55149db1e7ec3e6ef2562559340b6b9c14b23a608f8df6c1fc84c

  • SHA512

    3c30b4b9080bd47924d85fbcf8585b00083367970ce0ae077f67cc3cdfdd47d828f8ddbfeab1b01c14f7843ebd3d2d22a422461efd361457f56f31bc3454f068

  • SSDEEP

    1536:255u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:8MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 67c844d9495ba4d3648b333b34ffdcdd_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections