General

  • Target

    460c694ad7969f8c3a4d7e982bb046ab_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    460c694ad7969f8c3a4d7e982bb046ab

  • SHA1

    3bab6bf5097fc3375ead42dc837b382c1550afc7

  • SHA256

    e432ef9144c2e4c031a3ca2c248d221d8b204f3504e817bd4631fe80f3c484a1

  • SHA512

    bd3a2029f7c5ab52170cdd9cb0beac882b420ee87c87555685d1a836103f91c95d4ac2c3ac3e159a16c2d66420f1aaffb2d33523d2220bf1c285a02640caf0ed

  • SSDEEP

    1536:l55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:tMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 460c694ad7969f8c3a4d7e982bb046ab_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections