General

  • Target

    9a4f0adcba3c9d502760570bb582448c_gandcrab_JC.exe

  • Size

    252KB

  • MD5

    9a4f0adcba3c9d502760570bb582448c

  • SHA1

    30223f440dfca5b73cf24f0bd581ff92a0a8df2c

  • SHA256

    f95839ff9396d92605311b12272a33079da9f1f11105b0d62dfed24fa21ddf26

  • SHA512

    2127b22108056d07c1af12c0d6ab8ac0d88f4afe8238edf990084262714ca60e66dbab78bb6be7af617684c623b9430c43e345b32863725fa9568037462ce907

  • SSDEEP

    6144:gXjOnr6+qqDL64vdjD3f2YP+pmplO2oS8K:gTOn6qn6cjLf9+oy2oS

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a4f0adcba3c9d502760570bb582448c_gandcrab_JC.exe
    .exe windows x86


    Headers

    Sections