General

  • Target

    7e92c92f3f511ff79ec8f71d3dea180e_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    7e92c92f3f511ff79ec8f71d3dea180e

  • SHA1

    5053eadd20f7f9ec3b82bbd54ec4573638b113f3

  • SHA256

    6a84908a8aae7f77ac560d2e2a08bddcfc65556dc668d743712d78193926936f

  • SHA512

    71630357a9f8d27942c0c51ee9fe84cfdaa57a8d7cef6b0e8ee666b2b81a1a8b9776e4a8636fe0bf516c33c43b105c7ac458a9c3d010c1177b8e9bcffab4692e

  • SSDEEP

    1536:OgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:OMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7e92c92f3f511ff79ec8f71d3dea180e_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections