General

  • Target

    63c8de0c1f41dbba64f57abc541aa84c_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    63c8de0c1f41dbba64f57abc541aa84c

  • SHA1

    9f9aa26039ae6672a9af96c9e9ea203c23011d15

  • SHA256

    65ae970a74f0121a1601d646cc4a01ae91074d344f09462cd776e261ac01c3f0

  • SHA512

    4e59e97c66f8b65845c3e05e7560c02924622d8052a53aaa4ff8c6e59db135f9c7b925fdcd3701d17d1c23ba2a49785f3120c4de06f645c174cefb1a2268e7d0

  • SSDEEP

    1536:O555555555555pmgSeGDjtQhnwmmB0ySMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rD:/MSjOnrmBaMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 63c8de0c1f41dbba64f57abc541aa84c_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections