General

  • Target

    801eaea9ae0795b7f50a94fd59bbd041_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    801eaea9ae0795b7f50a94fd59bbd041

  • SHA1

    555c11b4bd2671e6dab592ccf821d8a5e78ee0de

  • SHA256

    80a25b6fe8ac3fc5daf20810063862be1ace4aa71dc72592c37b8b76f7e1802c

  • SHA512

    3930926e4d66b70144643f81d7d75d1b903bf08e41f186059fbb3e83873c21829d7e3eda983eb11c1c8d7436c32f73238a2f50ea034ed2a9bfacdfcc0563cdfc

  • SSDEEP

    1536:H55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:jMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 801eaea9ae0795b7f50a94fd59bbd041_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections