General

  • Target

    8ca5503f5df837f817e40111d3c526bf_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    8ca5503f5df837f817e40111d3c526bf

  • SHA1

    36ac4b3243cec33c0e9a35aeb6417184de813b4b

  • SHA256

    1ef66e37edd072ae8e323f4a2e00b83859d22fa0485c7adef792a214acdbc953

  • SHA512

    1c84662971737f296a43f739dc54dc0acf509b67cedc4cb2be0fb99aa367f491add9693a6563ff8a5bcbfeff69c294e102e14855e163e87eadd026796e5166da

  • SSDEEP

    1536:T555555555555pmgSeGDjtQhnwmmB0ywMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r:UMSjOnrmB4MqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ca5503f5df837f817e40111d3c526bf_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections