General

  • Target

    5ae43a77d9604db4527433a44c4b6d47_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    5ae43a77d9604db4527433a44c4b6d47

  • SHA1

    710653ae707d6f191ac5afbcdc8330a1944d7a44

  • SHA256

    27a61ff9a656a660b591bf7f149b7ddaae8062b403abdd768ede073e351b0b7b

  • SHA512

    3b39681af36b5c00c8e22e3462d497d6f5db7a885eb40195d6f03b874ae4fb1a12b4665e9e3fccedceb41eca4cd30b2c3550b0ce2f7f79fda2ba721ca009d02b

  • SSDEEP

    1536:8555555555555pmgSeGDjtQhnwmmB0yPMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rg:5MSjOnrmBXMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ae43a77d9604db4527433a44c4b6d47_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections