General

  • Target

    2de179d2c471ee4b65054116dd0a6b46_gandcrab_JC.exe

  • Size

    194KB

  • MD5

    2de179d2c471ee4b65054116dd0a6b46

  • SHA1

    cbd673c499631adc59dfdfee104e3ff0fbda6636

  • SHA256

    f90d5227c17590a22bae274d2ee7c5efc0864a2860bfaff97333ba0388290154

  • SHA512

    dfe2a8cc7b17e61f8b939415fdc3005599ce45c9b0c18ed993f4f049d44ae7a3c01e73209a8527658ea30bdfca388a9c87ba5d53af1564ed0fc34c64aceba318

  • SSDEEP

    3072:YD9tBYvdqQeA6jVbOPP4MqqDL2/phDMkcUkIwofej9Q7WWdE+FBaDmh8CohxggE7:6tEIsPzqqDL615vdm4

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2de179d2c471ee4b65054116dd0a6b46_gandcrab_JC.exe
    .exe windows x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections