General

  • Target

    d335e660a78f40c97ed9eb1c369c4aed_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    d335e660a78f40c97ed9eb1c369c4aed

  • SHA1

    4f081495e635d8f46e77965cf9b99188ba8b25ec

  • SHA256

    9c7cfe29819cb8b6e075dfbdfc96495830a2593a239ebc470f4d9eaa350c07c6

  • SHA512

    1973883431f9c1f2586730a5014f41131a84c0e1620c18bcb4edf58c8aba7993e7b659d58e8f668180aa0911af62a141a29bf5b01a5bc99e0f8641ae2881257c

  • SSDEEP

    1536:Y555555555555pmgSeGDjtQhnwmmB0yKMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rf:1MSjOnrmBiMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d335e660a78f40c97ed9eb1c369c4aed_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections