General

  • Target

    8b35a2802c3f6fe5f2e1a36dea0b4518_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    8b35a2802c3f6fe5f2e1a36dea0b4518

  • SHA1

    9e1c01d7c2f82cfb961eb97ddb5ec90cb1018667

  • SHA256

    52a57a8539025e00540a00048d30fc7dec0e733444420cf459697ffff7c2113c

  • SHA512

    a7279fbf5b0e16b596d6541709ac5769333d96e492a55dd3e5fa68d60955fe3c51c273e89ca2ff259b1e4938cc583aa3529b3f2176c04b5fdbfcd5ffb8dced2b

  • SSDEEP

    1536:N555555555555pmgSeGDjtQhnwmmB0yl4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5+:qMSjOnrmBd4MqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b35a2802c3f6fe5f2e1a36dea0b4518_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections