General

  • Target

    5c3cab097c17243f6e14b88d118305ad_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    5c3cab097c17243f6e14b88d118305ad

  • SHA1

    ddda4e67955043fce865a56b34e8626412b3d44c

  • SHA256

    458c24c00765d929d5c009b3dedf9b36f0c518ec884b9f4c536cdb5d52a74028

  • SHA512

    bce0627ee76579a709118ab09dffe32475d9e7591256d32c3a754c4d4ffa4a09d7e07b9144f5bfdaecbcf821763d358aaee82f5c94146a8e66c7db7606b0ac2f

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0yeMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r8:gMSjOnrmBWMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c3cab097c17243f6e14b88d118305ad_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections