General

  • Target

    b893cde83253d169ea1f15d60163139f_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    b893cde83253d169ea1f15d60163139f

  • SHA1

    cb007f7cf272bf43612cfa15d0fe89ac3a3c0594

  • SHA256

    a96692586963a41fe4424ab1ca98205306fb65c314022c93b9adb2cb647fb703

  • SHA512

    69768809331bf587c3f399cb795422b113dbc9c4b186845d90e5fb51984049d5f9605620dab253b0f0ff23f654f20fd7f9b29fde8a790bf2cf731871464920a5

  • SSDEEP

    1536:955u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:1MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b893cde83253d169ea1f15d60163139f_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections