General

  • Target

    b0d8c2d49156655f41058583c4d2b833_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    b0d8c2d49156655f41058583c4d2b833

  • SHA1

    ce51b6d01cb92d29e3639fe31dc8f218794547be

  • SHA256

    27a2fcda83a04016c357def08c631174806226653bfca2ed40f0ee28d73a6497

  • SHA512

    f7302a681e3a56367fc0b06ba5d705bd18577dc49350c4984b83f29f8c70acd5af5c1df79e40b342535bfcc858b7ef3d69ca365cec1badd1a29c942896938bb5

  • SSDEEP

    1536:ggSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:gMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0d8c2d49156655f41058583c4d2b833_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections