General

  • Target

    aefdfac1047ca29ca1bd28207885f197_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    aefdfac1047ca29ca1bd28207885f197

  • SHA1

    958bf9651f09fac018e08d03e14f2964cd5122df

  • SHA256

    46fad8d0fd0dfd6a668bcb82c35329b2f4f3a4868fcc4f16f46f5837cc6bd3fb

  • SHA512

    05a94ceb7970f4668a2cf758c82a28c97bab81a5821f678398ee6605ba5250db9a42e59b42f89fd8721545d8ceff58e12e39721d15e99a73a1d21212b258160f

  • SSDEEP

    1536:X55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:TMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aefdfac1047ca29ca1bd28207885f197_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections