General

  • Target

    70df3ad7e9537ac551300a9ff21fd3b5_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    70df3ad7e9537ac551300a9ff21fd3b5

  • SHA1

    8327f25df6bb6f1e8ed2cde56a69a5c3ccbb8af9

  • SHA256

    7a5c256bd69e45cab4e1407d3e8af94df61859cc7acce7811fb7cb4b77064997

  • SHA512

    a7730d2b575ec04840e33ceffb8466e540f066bf098de14d2995f8088d3bb851732a552f9b29f897b7f3da43f565182ea6a1a6b9390f040726dc8705120136ac

  • SSDEEP

    1536:U55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:GMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 70df3ad7e9537ac551300a9ff21fd3b5_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections