General

  • Target

    5dddc18be09b2323c29e8e72d0c2d33e_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    5dddc18be09b2323c29e8e72d0c2d33e

  • SHA1

    38c32acb35659b8f97b98d53483c1a31951de0bb

  • SHA256

    4e824f394dd6937c5192ad70755c4f113537f1099b0407caafd0bfe2ce5c7cf3

  • SHA512

    6939ef1245c24e037f58cf6cfb8bd6d4ce923f527ff9d1cbaec37def652215fbeab031fcec69bf34598edf020f96c1735c73c2e0fa2a959554668e52e6612da6

  • SSDEEP

    1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5dddc18be09b2323c29e8e72d0c2d33e_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections