General

  • Target

    958def8ed3eebdd3581296f0e04bb6bd_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    958def8ed3eebdd3581296f0e04bb6bd

  • SHA1

    e2f6a8b517b97720b0532cb15ed93b547bc9f66e

  • SHA256

    7a6db461891851c32e24d5a9b6975ffa167a9215ba7053167e08349fee19bdf9

  • SHA512

    a0d327c923147ea9b4cc008fcc96af6b19f4f8d3fce4265c1cb13ce878e8214e999fa63cc41909a1920a92714f134c7fffe84c10c5519f4605a9bfd7898a6ce4

  • SSDEEP

    1536:a55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:AMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 958def8ed3eebdd3581296f0e04bb6bd_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections