General

  • Target

    1dda42382dd4826a082eb29da151317d_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    1dda42382dd4826a082eb29da151317d

  • SHA1

    0960c57c49639bed84c749d5a6f982f37166328b

  • SHA256

    31d476e405d46c026d54bf504f1a6e38010debbe0ab024674107fc209ac22ed6

  • SHA512

    6c151f34873ae5eb4fa996233f6f0c72675c71eb2754a2da48b55ad2a86ffdb79461947da57b340c0d4dea6354ead4e4f32b7f88ff02370795c13c1cbfc76bae

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0yT21MqqU+2bbbAV2/S2mr3IdE8mne0Avur:gMSjOnrmBC1MqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1dda42382dd4826a082eb29da151317d_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections