General

  • Target

    4ed9498b463dce7ee2110b987c2909ed_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    4ed9498b463dce7ee2110b987c2909ed

  • SHA1

    6032cdd49b8c3317c593603cd7539b1b5ca2d3e5

  • SHA256

    6b0abf702a6408f906bbd15726b535cd90f333ede04e2adc547353737857ece2

  • SHA512

    29bd784c3526a227660ddb7689aa80b3010b66ddcaac0f27ae2711fd6fd895bc48a84a60dd0868d1210cf08dea1860c6d31c1d85fe9203ef60ef226614614054

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0y8MqqU+2bbbAV2/S2mr3IdE8mne0Avu5r6:gMSjOnrmB0MqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ed9498b463dce7ee2110b987c2909ed_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections