General

  • Target

    cac74b48ed2572392a7291da3d1d1005_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    cac74b48ed2572392a7291da3d1d1005

  • SHA1

    239ff6326660f2776abb9e926b56432acbbcdcab

  • SHA256

    edb582de253f52a15fae288f9fadd4af8eb20a2ad1da12ead3badd1da4fab0b6

  • SHA512

    46a1b495c330126142403e521a02e8b985c1b67b4926c789249b0fa7465853c50259d7619c9961aab9bcc648a7331f7b5651f08d33a600354f440608d3b3145b

  • SSDEEP

    1536:7555555555555pmgSeGDjtQhnwmmB0ycMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rh:cMSjOnrmBkMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cac74b48ed2572392a7291da3d1d1005_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections