General

  • Target

    116c426cc82c8ca1f54685f2e401c08b_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    116c426cc82c8ca1f54685f2e401c08b

  • SHA1

    f79a1fcb1a323bdd5a0e8e8dfa06577d8c963ac1

  • SHA256

    184aaed6fb1ec11ac32cac11e69537e5feae00067696219697456b18304f0fec

  • SHA512

    c5b345b12ef547e8a2126879b110fecc037832b574b1262b2a6de0a21e7ff4a45a4acd849389a139e6ec6a4832255b0358b6ff35f1c3ef21e8a5b86bff689e07

  • SSDEEP

    1536:A555555555555pmgSeGDjtQhnwmmB0yPMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rg:9MSjOnrmBXMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 116c426cc82c8ca1f54685f2e401c08b_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections