General

  • Target

    cfb0c18ee8e6aab2979df62fef7b4bbc_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    cfb0c18ee8e6aab2979df62fef7b4bbc

  • SHA1

    67c51c06e57bee6cb5a316060686b70273f35261

  • SHA256

    873ed1348d1734f4d27dc4217bcd3f6da21f684c18bf189229fa2691437a2f9f

  • SHA512

    5581dbb7cb03c99cb66d706e012e70c897f51bae20b5237054b6e52faa9f5bc759625368d59481d5e52a18f3aa32d70890b6c660c00a5f29fae136f01ebd5083

  • SSDEEP

    1536:N55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:lMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cfb0c18ee8e6aab2979df62fef7b4bbc_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections