General

  • Target

    9214031e3308770b7e648927c9f403f6_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    9214031e3308770b7e648927c9f403f6

  • SHA1

    fc4a434f871bda25400ed8c5b7dfb769ffecf089

  • SHA256

    4b2420c80d948cbd8e67d9f5b8bb60e8226700409b2b1c6182eab4255bc66f85

  • SHA512

    08c76be2b3b205c6d617ef94d28e8014e7fd830fef8bac0d57abd040eb857e650fb8263f98bee73f8c07d89d6b301bfcb8aeae88a5169a9446cdda537af4a9fc

  • SSDEEP

    1536:L55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:3MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9214031e3308770b7e648927c9f403f6_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections