General

  • Target

    8f4beddf453c975305e8a67e565cc902_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    8f4beddf453c975305e8a67e565cc902

  • SHA1

    a6fe98014a68ff9b8e1f8d96159ae0ee67710023

  • SHA256

    170b9894da44468b3b1684211ab8089ddaa64f7f97dff5d28cbefda461dcd66e

  • SHA512

    d625a6937fecb46125e4fedfb64afddffdf5c5eb9898835d25f51a0beb6e7f44336573679bdf6c92e3d8bf187e46cfeafddac0450ad078e69cbb009d64812e52

  • SSDEEP

    1536:OgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:OMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8f4beddf453c975305e8a67e565cc902_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections