General

  • Target

    dc73583867d03ee996579c5d4366afa2_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    dc73583867d03ee996579c5d4366afa2

  • SHA1

    3a14a44532a52d8840e3daf7e55917025eaf9b3b

  • SHA256

    8942e638a908ba33961a9014e81bd3e13508deb534856711a06ce6e289e0f596

  • SHA512

    b9cc4698cf7904ac727a7ac304a7c3f616e99f6c73aa7bebeee649aa2ceb4d7b52875aabdd64b890cef14c8fc336bc9df94f4860f9778e9c5e5ca78d5aa9ebf4

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0yKfMqqU+2bbbAV2/S2mr3IdE8mne0Avu5w:gMSjOnrmByfMqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dc73583867d03ee996579c5d4366afa2_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections