General

  • Target

    643f7dca925a0deb9bd635fc438b4095_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    643f7dca925a0deb9bd635fc438b4095

  • SHA1

    fb9b764ddfc98940047c5975515509f0c43dba7f

  • SHA256

    e9ac5ee797dfc1656717a985d24bf1354ec93b32bb6d80f0db2907bba9857ba3

  • SHA512

    b64bcacfb50490c8db7a986f28d1a5be5479e4c4d455352bb1cbe637e1b0f952c4cb9695f7db9d86a9575ccbca3d601c9f2a22b1d3dc3b7b8a448d6a6e33815a

  • SSDEEP

    1536:y555555555555pmgSeGDjtQhnwmmB0yZMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rQ:jMSjOnrmBRMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 643f7dca925a0deb9bd635fc438b4095_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections