General

  • Target

    ab777252ebd6db3025404054da7c2897_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    ab777252ebd6db3025404054da7c2897

  • SHA1

    6148df8aa2d2d00c61140955268a11ffd7f7e3d8

  • SHA256

    0d9c306b2b5f695badfc1e990c1a1e97b561496358d4937b220080f96fa4bbae

  • SHA512

    1b9e99c8b4e9e402e3ff567f3c0486ec41be1bc18a785b108f4425d76effc568183fa2fbf55a9874cbb140331a6a596f8c9eae4ed03ff8d75ef563cf1a627350

  • SSDEEP

    1536:m55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:MMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab777252ebd6db3025404054da7c2897_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections