General

  • Target

    79c70e1e0260274ac1138a4bc784c9fa_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    79c70e1e0260274ac1138a4bc784c9fa

  • SHA1

    e6b9405bffbc3e6aae8d9dbf632a1cfe20f68205

  • SHA256

    e93d0a556f43bcd607a43d49aa637181274d78f70c31b1fc572acab7efe62742

  • SHA512

    ef7f149a77f77145190962c2a9a864bf01de84d96b58f894ea6f97c15e285248f1f96a6b219750ca1f1cd64136309d735ff072dda623778cfa8f22d6f7586629

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0yKMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r6:gMSjOnrmBCMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 79c70e1e0260274ac1138a4bc784c9fa_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections