General

  • Target

    72c206bc681c5c586c2482469ec48c11_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    72c206bc681c5c586c2482469ec48c11

  • SHA1

    b6e6f520ba1becf1d249320040b3e814168b675c

  • SHA256

    98b18b331ed8b0b92f4fbf4d740e03aa7c88795ab671e1157d8f9258275eca03

  • SHA512

    2670d340593f41c4f4cbc9f6610ad8177e01f30084c70afb6b16cf0d13c9b84fc69c45155466e3e42ea9407e0de9bd7e0aed34f1dba45e5d1c3ddf69b69c4cbc

  • SSDEEP

    1536:B55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:pMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 72c206bc681c5c586c2482469ec48c11_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections