General

  • Target

    dc9a77e5d760970e049227e7188d2e03_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    dc9a77e5d760970e049227e7188d2e03

  • SHA1

    710ea36c9c770fa7a005578fd9488dfd937bc8ec

  • SHA256

    ed9873032fa69af368c70d584c2a225dd8a87bb6f57a1c7d0df547840d0e2b0c

  • SHA512

    38ac8f960baa5b607eefbfbb11d69c992f3ed42b2f116a922a320436e9682a95c9afc7f02485222af5f4ae1b1044c18a90d34a714620ddcbb687fd18aa40a065

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0y4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5rH:gMSjOnrmBAMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dc9a77e5d760970e049227e7188d2e03_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections