General

  • Target

    9263b59515988a45e7a6846adcca1df8_gandcrab_JC.exe

  • Size

    284KB

  • MD5

    9263b59515988a45e7a6846adcca1df8

  • SHA1

    87fe82a7ec3d125dfe70e7a87aa3f5e819551a87

  • SHA256

    982188e1628c6c37bfada3f4444b718bce17ef7c3b679d819e669caf9dca04f0

  • SHA512

    459d93311184c0d1f5c2b0951961d9e8160866de350365c9cf7592d6db673a913a79b4f0f5eb4ba0a423a3712b4a3d364f29ae46754e258e41cfccdaac72d04d

  • SSDEEP

    3072:YD9tBYvTqQe46jVbOPP4MqqDL2/phDMkcUkIwofej9Q7WWdE+FBaDmh8CohxggEW:6tGIsPzqqDL615vdmNClTg9Emz

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9263b59515988a45e7a6846adcca1df8_gandcrab_JC.exe
    .exe windows x86


    Headers

    Sections