General

  • Target

    87db262ccb13ec563b80246411250881_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    87db262ccb13ec563b80246411250881

  • SHA1

    851da5417a08d7d928d2a25671a3a85a2e91e9b4

  • SHA256

    ba0f18f25095e612e11e8712d1b30030ca1860fede4edb50ba12ddab36f02fff

  • SHA512

    5bd0631b677c55cc8982b086be53b33735ca55d3c046decd7cd04a2c0d7cca5c0f8bb0c14504f2db357e1d63ef30440c076b1ebe8d6082cf1d69f1c6aac83ed5

  • SSDEEP

    1536:BgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:BMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 87db262ccb13ec563b80246411250881_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections