General

  • Target

    030efb51504f1d25fd3fd9015f4342ad_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    030efb51504f1d25fd3fd9015f4342ad

  • SHA1

    2696a2f96ac81c52da1f71cfa044f1a4585fcf36

  • SHA256

    64a62c278fb0fb43374a111e03296a49a92058808347f3a9e284fac639da0fd5

  • SHA512

    de00bca7f2b65775cfdc14bed7f39d41877f1c6050657f5afa70a959993a762ccd79be4c47360e92caf333f1c7eb96a690ff1e25402a58f08d41ad70d7c50c3e

  • SSDEEP

    1536:F55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:NMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 030efb51504f1d25fd3fd9015f4342ad_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections