General

  • Target

    c635ff519c11feddf6413848e0d84f75_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    c635ff519c11feddf6413848e0d84f75

  • SHA1

    a7bac2a08dbe3c51fbc01051ecf6688162efb8c8

  • SHA256

    88472ac10dd2771c5fc643f8ddaac800544bc5a7d90086b056f6d2cdcd896099

  • SHA512

    eebdefafc0e8ccb73fefdf72c18e8f0848ff3c05592c50b6772c4feef9baa59960bb63c1cec309e0358c65161797f20ba56112a6c9cf711f79998daee51f6b3f

  • SSDEEP

    1536:e555555555555pmgSeGDjtQhnwmmB0ylMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rv:vMSjOnrmBtMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c635ff519c11feddf6413848e0d84f75_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections