General

  • Target

    24e439affef62f088a323d72b1d01d21_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    24e439affef62f088a323d72b1d01d21

  • SHA1

    ee41a31a09fecaecb0f0a3be0bc7668217cd9d8f

  • SHA256

    a6d1d70cd3c470a327051de2267e5fd369547414a70eed185f5d30fcd4d62074

  • SHA512

    b8577627204f4a74c8235e861ea0603c1a2ac2a43875066c8628dd19514638c384fb288b012c66511d0b44f9709a93baf8f28f6455848217458a12592a697fcc

  • SSDEEP

    1536:m555555555555pmgSeGDjtQhnwmmB0yKMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rf:3MSjOnrmBiMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 24e439affef62f088a323d72b1d01d21_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections