General

  • Target

    8a4a4fd3b8ab4e3d90beed75019ba2b8_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    8a4a4fd3b8ab4e3d90beed75019ba2b8

  • SHA1

    e235151f81019ad34cd426ab9bcfc19781fd0ee6

  • SHA256

    468556486ddb2447a016e942040300e2fefe27bcf7b847cc8a16d1d47ec33677

  • SHA512

    e0310f55588223f7246a419d635e822b9d83d408c2c74700330a0235eb9927a8690d84d2b588bb5f5bd85a6e5a9c8deda449d2ebdce71527b38df86b9d6f3a9e

  • SSDEEP

    1536:c555555555555pmgSeGDjtQhnwmmB0yfMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ri:ZMSjOnrmB3MqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8a4a4fd3b8ab4e3d90beed75019ba2b8_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections