General

  • Target

    b98b6e4508b1cc83259a8047e33ce6db_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    b98b6e4508b1cc83259a8047e33ce6db

  • SHA1

    ae9f5a97ab27be78c9782aee89fd17530544cde0

  • SHA256

    c26af0ebdabb0dd2a67d8ef673fc7885b3a20e44e5e4a440dde87a7708cbdde0

  • SHA512

    a5f62bb3f717806ce110d2806f81d1aa9c514e124645d68463e4944d289fbd653eb690dfd7925b6b8a0c81dd868d49610253d3091565f0130ea3d7afc29b97e5

  • SSDEEP

    1536:A55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:yMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b98b6e4508b1cc83259a8047e33ce6db_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections