General

  • Target

    02680136f05df04cb2598bd2ebff2686_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    02680136f05df04cb2598bd2ebff2686

  • SHA1

    776d8e24fd9e16d2cfb2b17f27d33d8d545e77fd

  • SHA256

    d6fcc10cd4fef6b572b3021f1eb76cb264339feb3afa4b17911900e0780c0ecb

  • SHA512

    963738b053c789dcd2a92312425d962437b14eb0678571b72bbf66d0b81f76a69036e7ea37ccbf98f173c8be12e520a4ac42dfd4f9e79ffad6925ffdc44b5c60

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0ycKMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r:gMSjOnrmBXMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02680136f05df04cb2598bd2ebff2686_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections