General

  • Target

    6703afe8635d9097f78c35cef855a8e9_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    6703afe8635d9097f78c35cef855a8e9

  • SHA1

    d266999b34e6ffb149bab0f4c4c2af84c1a05456

  • SHA256

    bb469e90de22de828ecd07f50bd3b1df7706dd6b23397ef6cda4dc4d216a116a

  • SHA512

    9dc3956877850543526d1bad4d8742e6ac21147f50bb50dfd10be4b349de66b31583c7a3129a140dc367dd932d9b3c99f3c43dee1f9bee53564cbb04f8680d8d

  • SSDEEP

    1536:f55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:rMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6703afe8635d9097f78c35cef855a8e9_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections