General

  • Target

    08b7e52398b8c3f7a42a6d5b0747a794_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    08b7e52398b8c3f7a42a6d5b0747a794

  • SHA1

    7487e06a8e2d78ed0cbd023a269152507679863d

  • SHA256

    7dd4fcb807201fecc1094647bba52fa061bb96ab4637fe77c8bb610a48a90858

  • SHA512

    d201cd843cd39ba0cb6a739e19e0eeb9372ccf9a0f711f9fd35ba8210f14ff9c24a6c3e55ce1dc4cce8033b27941a7c6a20f68bcb20299f23b7c3e3777aa925f

  • SSDEEP

    1536:X555555555555pmgSeGDjtQhnwmmB0yoMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rR:4MSjOnrmBgMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08b7e52398b8c3f7a42a6d5b0747a794_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections