General

  • Target

    3984cafd0af3ecf110babd8317f6603c_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    3984cafd0af3ecf110babd8317f6603c

  • SHA1

    285d2880bb22c3de56b44202d880fc813be03136

  • SHA256

    96c91c387cb9a541d0b3a9f6923e766f10c65f84eeb7ab83e0d1477bb5dff977

  • SHA512

    d05435665919a2e6f8f2a7894bab82d5238baf5575647cdbacd83898522d5637d76e5144f939c17caaeb598fe968cddbb9476bba8aaca9099b13ba7cce5864c4

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0y1MqqU+2bbbAV2/S2mr3IdE8mne0Avu5r:gMSjOnrmBdMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3984cafd0af3ecf110babd8317f6603c_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections