General

  • Target

    833872cb5e173061a3ec5f7bc75d942a_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    833872cb5e173061a3ec5f7bc75d942a

  • SHA1

    ec9325665f4c7347a24756fb5ab2c844bc3e52db

  • SHA256

    ee0af96e8e2f67d48c8fbdfc9f127ee67241491a5793548c5552dd17c2e94627

  • SHA512

    0256520ded79f27201e6449756c4671c7943d4b634eba87f722eb5faa95c81f3e226c03aaa298a596e514c04ff80f52b9feb460b7432a40e2879c68acee7dd80

  • SSDEEP

    1536:IgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:IMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 833872cb5e173061a3ec5f7bc75d942a_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections