General

  • Target

    83932a5ce5f863eba5ab4a9f82e2bc99_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    83932a5ce5f863eba5ab4a9f82e2bc99

  • SHA1

    48261978c82dbe392b3b38c55cc3dbfcff3aa248

  • SHA256

    0546d2563e0217708411de05c205a51d1dc7a5cb6b5b1966bba002e5d9aff0c9

  • SHA512

    a71aadf93c00d17aedb4808cdb0d311d058078d4a2b29f3ef60a83a3e46339f6a142777a96b0f7fa6f952066ba71f6e8c44bdd78ca6d703ed30f6c00fba9b3b6

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0Avu7:gMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 83932a5ce5f863eba5ab4a9f82e2bc99_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections