General

  • Target

    8efde590f610f4b20b00d3afd17c6798_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    8efde590f610f4b20b00d3afd17c6798

  • SHA1

    1f0c84a3bda7a66b938ca10fee1c1ed9adc125ec

  • SHA256

    5ebc71601112e2715da6b43828e2245ccd9e1b4666affa87f2f07fbcb9a78014

  • SHA512

    f33fa445dac78cb8137d1f914fa731e8a170c3af88151d18bdcfdbae075b480c50f3cce47d7b733cb125903b8a582555eebcd261ccf46a4102df68822eaeab0c

  • SSDEEP

    1536:tgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:tMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8efde590f610f4b20b00d3afd17c6798_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections