General

  • Target

    2f53a389b1df5c1dd814d5b42cac89a6_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    2f53a389b1df5c1dd814d5b42cac89a6

  • SHA1

    0ee1f15922b0a26ff9cff73f64cd0b0e8a38af65

  • SHA256

    757484f013dbd6fb884be1c8b475216f4039673bd38cf39ad1574286864e9517

  • SHA512

    0ff2621e6feb2d65172a2555c1830e0e443a50f5e115b06232b31c64d9dfc0f8ad45704b5bb7bb144c3ab2dca29df9f486cfa03d7730d59a3c8b1e123c4f10b8

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0yCMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r:gMSjOnrmBqMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f53a389b1df5c1dd814d5b42cac89a6_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections