General

  • Target

    4d2a8ed03cfe8abc888122125beb6c11_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    4d2a8ed03cfe8abc888122125beb6c11

  • SHA1

    1933469d7275e19b4b2046f21e812ee6eaa394d2

  • SHA256

    c40b32a7c7fb87fcaae367cebbe7a3e0197e47d5504105bea3a7ad852c98e1ed

  • SHA512

    dcee0bcec6c061c3e52e5097043ed7f8acf8af1561d65f87c4c3a84d1c85b88724c6e817dccac881b254419dbd55655c5b55ed8f80b123b1b9dc9fb7ed47fcb2

  • SSDEEP

    1536:DgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:DMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d2a8ed03cfe8abc888122125beb6c11_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections