General

  • Target

    20bcb1228aabef46fb0f92b37ef6b233_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    20bcb1228aabef46fb0f92b37ef6b233

  • SHA1

    a819f1df81b5f9496ca6f84ea5c068fa23238366

  • SHA256

    7d62ef05804dc54b0285cb69b99b00591549c9c62cbe81776a3d5ec77bef8d6b

  • SHA512

    48bec42b413ffab874bdc3f48ed9b59d1caf8aac004ccf1738b62266b3a69d624d256f856a0d16b95b211dbaca64ea00903209fc1c3f275dffaec3299b6f40c1

  • SSDEEP

    1536:A55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:yMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20bcb1228aabef46fb0f92b37ef6b233_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections