General

  • Target

    22ca5e82a2e15539631e2fe2947854d7_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    22ca5e82a2e15539631e2fe2947854d7

  • SHA1

    c85a66bdf5ccf5954d7d132a1586d8f55ca4be16

  • SHA256

    7d0e3c439622c733440b4f15fee85ec56b8e2ebf1a2f4e7d1a711262e848b952

  • SHA512

    d9c84bf205acf9a6c9a0de10ee1f13a075740dd381dd7fe38b233b04abf1cb06a2cf26d0927375d8fb9b0b76c2ff45729ed1f190e73c05a473eb929aa3d145e4

  • SSDEEP

    1536:rgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:rMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 22ca5e82a2e15539631e2fe2947854d7_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections