General

  • Target

    8ff24b64f532800da4281820818c34a5_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    8ff24b64f532800da4281820818c34a5

  • SHA1

    828ef8f6c2cf03ef30c1946118e1b74d60df50ce

  • SHA256

    d0c088c7c8c7a99e9820fd44e757ad3bdc24a67ff3cbad76bbc4cea0d54ffe62

  • SHA512

    6be150f3a513332dc25c99c4843402af8cfa69f4ee2e55c558eddc13bc0916350e1e4a640c533bec631078ff077acf52d39c532b1aa0998f0f95ae0a81f5d3b8

  • SSDEEP

    1536:K55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:QMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ff24b64f532800da4281820818c34a5_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections