General

  • Target

    26a70bb12f656a51120b9896980d47f1_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    26a70bb12f656a51120b9896980d47f1

  • SHA1

    895c3b69950f0ca4319b8aa9e460957cf94a7c8f

  • SHA256

    425f58df84bc6050b0e30dd58acf2c9575152ebcfc7ffed34cd8c482e0bcaaa0

  • SHA512

    5403490d3617795abd01fb4168ce2ff1a5c7ba0ebdbd6c8b0c555c5700979ac9a6855ad1ed109a92bb213c5efb0d7cab22dbd9fd5fe0f48cd1f6d9f1f3914c9c

  • SSDEEP

    1536:r555555555555pmgSeGDjtQhnwmmB0ylMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rv:sMSjOnrmBtMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 26a70bb12f656a51120b9896980d47f1_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections