General

  • Target

    78b83992c8694d635cedcf047e1f8f9c_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    78b83992c8694d635cedcf047e1f8f9c

  • SHA1

    084103a9b2b4093cca50a81b6c748f63ca8c96ad

  • SHA256

    848d984a331e0bc461bd05a5730b5a822c6f5035e5fb784768f5d89c63e73c2c

  • SHA512

    191d48d040a6b7d5b992e5fc22fa0cdf5cd7d6678f40e395ac44e1f5ff656d95a51d7306cdbaf60bead4c4384154a1d93d2e9f71e1dbea32e1a85e0ba884dc00

  • SSDEEP

    1536:GgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:GMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 78b83992c8694d635cedcf047e1f8f9c_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections