General

  • Target

    09f88eb53c702f4da018b790317207cd_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    09f88eb53c702f4da018b790317207cd

  • SHA1

    a739f94295e720a6be8ada96d2f6586fd2990ed8

  • SHA256

    3161f2dc5d1c3ba53469d3e2991cd9014d64e683801e5bd78b2313c0bd7019ef

  • SHA512

    e906d5661e9bfea1e334da9106c38f3c9276c077d21fa4f4d3b9aa26606f5d88ed677bc5a8efd66208d1c95fb3fe3566cb5b3b1c6fc2a85b26775a0f77036c2b

  • SSDEEP

    1536:1555555555555pmgSeGDjtQhnwmmB0yWMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r/:SMSjOnrmB+MqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 09f88eb53c702f4da018b790317207cd_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections