General

  • Target

    b0ac0de4ec0208a35f100073c9b97442_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    b0ac0de4ec0208a35f100073c9b97442

  • SHA1

    172d7394dbd8f5b4dc3b696411fb0da73dbee6a9

  • SHA256

    0e05fafcff974b1c143d7705784931bea2a9e93413dc6149d6c26b5be40f4c26

  • SHA512

    6382a00df4397566c85f3160ea8d08c221ae11057644dd92b10b04098b84e506969b342f1e276b8edb01daeff7ab2d681ebf38e56af86315d9bd3f55da51d6e0

  • SSDEEP

    1536:tgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:tMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0ac0de4ec0208a35f100073c9b97442_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections