General

  • Target

    94c43b76e8a7360dd6e73c03fd960576_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    94c43b76e8a7360dd6e73c03fd960576

  • SHA1

    f0ded28ad987c9b4190ee8a1975a5ca506694b6e

  • SHA256

    472190053ec48e9bcb039c634c9baa1a2168c4779e8a61b91d7962d0d85e6081

  • SHA512

    ce19c3ad6d376777bbec0f5c238b3ee56c9611b53ddc436942f0ea714f8c7a0c07a92cf66a9657ab2b56faac593f05682b78a5e87fdf7ce223049e2ae1891a7b

  • SSDEEP

    1536:1555555555555pmgSeGDjtQhnwmmB0ylMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rv:SMSjOnrmBtMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 94c43b76e8a7360dd6e73c03fd960576_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections