General

  • Target

    ad61767011353419651bd0f9296e58a4_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    ad61767011353419651bd0f9296e58a4

  • SHA1

    e3ab227ad1906a73cf9aa3c514da4eb540571bff

  • SHA256

    9239334079873f0fda1e3ef884a58c74222fd8a019e54390bfd3835a605aeb02

  • SHA512

    c9ed6a4ba5ba18330be5728838fd3c7c86e2724282b6e61702f975136d58635d619581f5e9ac987623858efc855ad3cdef4f9d3265632828ee5eb129875ce601

  • SSDEEP

    1536:L555555555555pmgSeGDjtQhnwmmB0yZMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rQ:MMSjOnrmBRMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad61767011353419651bd0f9296e58a4_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections