General

  • Target

    8247ff535050a885a12a11a9ea5fa58b_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    8247ff535050a885a12a11a9ea5fa58b

  • SHA1

    67e9719d8b5a598ee8648f1790375d397739857f

  • SHA256

    6190775609ba1b835948b717d2b9d90828bf5b715a9fce75ccb30796701618db

  • SHA512

    7386ba24361f84dc6fa4d5f1c351439aeda01ccc1adf04ece2b7aac416ac8a23d0633425ef86c52a4abfb57bdf48420148311d327eaa54b2ce911042230deec9

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0yyMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r6:gMSjOnrmBqMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8247ff535050a885a12a11a9ea5fa58b_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections