General

  • Target

    36c7bd3dbb72c587b8b2904076d25f07_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    36c7bd3dbb72c587b8b2904076d25f07

  • SHA1

    b7339af1ce41a3823b115994eab14ae43a8cf2fc

  • SHA256

    2ed605e674a240906202eec9622db246364feec32d8a282ae48eb334da7fdb7a

  • SHA512

    76efbfe9b2f249145205a6c11457163dd5bb7faf553629cda00c300b221650dcb9d432f5572450e0f747b43462f2aa3b2ea5c86ba7577199f5d337e5d94cf0aa

  • SSDEEP

    1536:E555555555555pmgSeGDjtQhnwmmB0yXyMqqU+2bbbAV2/S2mr3IdE8mne0Avu5u:hMSjOnrmB/yMqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 36c7bd3dbb72c587b8b2904076d25f07_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections