General

  • Target

    7b6dd2ca33e11aa1a2228e1dcc131771_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    7b6dd2ca33e11aa1a2228e1dcc131771

  • SHA1

    1ee4b656f1c9d23bdeb46459433d99461de2e439

  • SHA256

    d973d495478b3f718535d7a87dd30444930ec123279724b3c61acce239a6b300

  • SHA512

    3e858d41f0e8f78aa775c46078965ce98f9f1e829fe689d7c4da7b9a0fd51f82316f632d38af640936c74306fd2c0b2966a355cae8031415691b33b06d99b0d1

  • SSDEEP

    1536:x55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:5MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7b6dd2ca33e11aa1a2228e1dcc131771_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections