General

  • Target

    cb1e916e7f500b0db59309d353a3f757_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    cb1e916e7f500b0db59309d353a3f757

  • SHA1

    5b196c51059265f61ccb81b3dcd98abe88477ad2

  • SHA256

    69b12e4d495f8acfbdcc23d20e395a156edb936a702404dcf70b76fb3d968b41

  • SHA512

    29bbdfcb1d3032de541e31e6582f8687b6ffaca35e671ab912e2971764274fc615a65ac63233c3fa9dce5179e19c0301abd452646f5233a12f9418759ee315e6

  • SSDEEP

    1536:8555555555555pmgSeGDjtQhnwmmB0ykMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rO:5MSjOnrmBcMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cb1e916e7f500b0db59309d353a3f757_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections