General

  • Target

    1143715d42f3036c03b7d6c3fd5d6001_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    1143715d42f3036c03b7d6c3fd5d6001

  • SHA1

    a2f2811f4aeffcc04b4f6f99d8e70eaa3d14ffb0

  • SHA256

    bb7b4885fc3c1c0a4a6929d86dff7d23744fcc173187b682760eafd03e598ce3

  • SHA512

    f2ee3545246dd16f18a8076806dc86477101066509fab3a2423c55e4d3f9d0763617931710de7b24eb2c782f008464c2c70bd70551c4bdc15475898f9c012362

  • SSDEEP

    1536:B555555555555pmgSeGDjtQhnwmmB0ylMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rv:uMSjOnrmBtMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1143715d42f3036c03b7d6c3fd5d6001_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections