General

  • Target

    39e295b1ae1000e21af72049eac6c3a9_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    39e295b1ae1000e21af72049eac6c3a9

  • SHA1

    f608c171a3124c45c0502a799adc454f5e4f9afd

  • SHA256

    16e9e9997872b93dc907e3aaddf9a923bcd643bc43f804d7ed7ff1ad183fd61d

  • SHA512

    85c69b593b16f0f8f42a6a05b86953e7e52211539f38e5df1faefb2eda2950d21f61039670e28d7a33badc469e832107dd7bab97ae23833764206e2766d61c7c

  • SSDEEP

    1536:p555555555555pmgSeGDjtQhnwmmB0ytMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r6:WMSjOnrmB1MqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39e295b1ae1000e21af72049eac6c3a9_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections