General

  • Target

    0b48c72715790dc1c4053e755faa9c07_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    0b48c72715790dc1c4053e755faa9c07

  • SHA1

    16c45d53c28fddce0548d8151e1264756e9b1e03

  • SHA256

    673b6b93af5bbc08442ead436e40e3527e858a19f030f0299a714aca4f4879ba

  • SHA512

    733a2f3c1739f49849b9bd1eafd4973aaa0476e4e5a219fb9dbe390bc0d4737e8f8ccb2cb36186d13f12ec626a6f9b89f8679d9289422a2fa2264aa39e6e7b35

  • SSDEEP

    1536:655u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:gMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b48c72715790dc1c4053e755faa9c07_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections