General

  • Target

    11705da6594e3b7a7a4fc476e28b345f_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    11705da6594e3b7a7a4fc476e28b345f

  • SHA1

    5ee1a93c56eff22b790add1817493da2364da083

  • SHA256

    0209475ca173dd76e4e8cc26ce0c7bf3aeafe9854fc0fc5ec7c53f8eef1f166c

  • SHA512

    9a6e69d8d17467759321c1d1644a09bab02d28d3d361c460b89d43d93f8eb88316a4c2c5f081219849b61ee65bffb68ad52c07e57c141dea19e71e84be8627a1

  • SSDEEP

    1536:K555555555555pmgSeGDjtQhnwmmB0yQMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rh:7MSjOnrmBIMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 11705da6594e3b7a7a4fc476e28b345f_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections