General

  • Target

    b4077fad5e1c885e17bcfc266d598dae_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    b4077fad5e1c885e17bcfc266d598dae

  • SHA1

    32752e70d05542874764db8f90c25367108aaadb

  • SHA256

    98e4e4ee6d062edbfc28afd300623b320f3d81136042f4cd5603ff096d929d4d

  • SHA512

    4d0ef72a2b654eeab4428c64399d8d4ecee87dd270e016ba51601a5eac047e98a3d5a4e23b649bf4e0310a4fc0c93a192bc1cd1fdbbc4530cb6877b0f98a0c8c

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0y+MqqU+2bbbAV2/S2mr3IdE8mne0Avu5re:gMSjOnrmBmMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b4077fad5e1c885e17bcfc266d598dae_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections