General

  • Target

    8db30d21e934176688a300798aef42b0_gandcrab_JC.exe

  • Size

    195KB

  • MD5

    8db30d21e934176688a300798aef42b0

  • SHA1

    77816dcd533371fa66a74b799b4ecd5cf76d8a18

  • SHA256

    38c7bdaddde0d076ee9f58c1005a708cc15cf6b77a1fdc147cfa2095acf4825e

  • SHA512

    581813d73bf11ea1f9c61d5253b91eb3fd2b64a9129c6bb2ac3416d24e5ddfb5621935c465bfe0de8463e974c074e04c728c08fcde953d8aa9e8cca86c6b55ba

  • SSDEEP

    3072:XeVNqnNXbwmggnYsMqqDL2/phDMkcUkIwofej9Q7WWdE+FBaDmh8CohxggER4JQQ:uRjcYfqqDL61IvdxcQ

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8db30d21e934176688a300798aef42b0_gandcrab_JC.exe
    .exe windows x86

    a6ea31ca05b209d45c7b920eb4e48a06


    Headers

    Imports

    Sections