General

  • Target

    d42fdedbf77f1dfa8e504fb3d20fb8c4_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    d42fdedbf77f1dfa8e504fb3d20fb8c4

  • SHA1

    28770be7b538ec3480fcadc2bbb9b4f080c283da

  • SHA256

    2e5c4dfe9a3d097555cf04c41493a3d8e98a0a92130fc5b46b812d35a137db3b

  • SHA512

    f64d98ac8aec46e3eba4e9af816149e77803e76e50d62e8e09e86859c57196f721962e8c59c5e0fc11aadb507f5441b19b069982156ff83a8c62aa04ab5a6737

  • SSDEEP

    1536:g555555555555pmgSeGDjtQhnwmmB0yXpMqqU+2bbbAV2/S2mr3IdE8mne0Avu5M:dMSjOnrmBBMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d42fdedbf77f1dfa8e504fb3d20fb8c4_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections