General

  • Target

    95fcbe1217f08b86f7dfaf3c603cde11_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    95fcbe1217f08b86f7dfaf3c603cde11

  • SHA1

    649fb04081f1f07e66c71489255d7f8b83ec183d

  • SHA256

    7622645ee8a803d6234f7a13f7155de94fc8a00d576a53ccbc5c628b07628eee

  • SHA512

    4558ac3bec427f478c22451723ad68aec5a4bcab934ebc79dd5385dcefe9dc0fb3650626ca42ab70caa09d16236194f4cfbcad8c6950394a7f9413b690516a23

  • SSDEEP

    1536:qgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:qMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 95fcbe1217f08b86f7dfaf3c603cde11_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections