General

  • Target

    41bc36746cc502fff1fb57a5e8d60e19_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    41bc36746cc502fff1fb57a5e8d60e19

  • SHA1

    180775af9d3f87c9f8d5f108c0757f532da1aea0

  • SHA256

    eade8b4937e06d93bd03520ca8380691b725acc768ac410fb27b65463d458d36

  • SHA512

    14b66a537575cc3b2c5ccfea230f3b2336cda15832a20d9741c78e1bdd5979174f4b68cb2d4c7796ae5d476c85ccf19823de84e793140b2be9590a2c6c1a1c32

  • SSDEEP

    1536:U55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:GMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 41bc36746cc502fff1fb57a5e8d60e19_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections