General

  • Target

    e2162007ab8632ae4be090954e40cb82_gandcrab_JC.exe

  • Size

    204KB

  • MD5

    e2162007ab8632ae4be090954e40cb82

  • SHA1

    baf62f4bcb4cb4c83f61ded8b38a91effa7cc700

  • SHA256

    768bc0859dff37772800432112b433abe0a4092a778f2e3e48058fdcdbd10dfe

  • SHA512

    99d6998f0e472ad5c7b9dc84d1625804e8301517ba2283449a90c5dc852245b4a3c47b4f5e9b083e3e43e6047b67a6146ea4db940cef81f5e91fa73da3c1137f

  • SSDEEP

    3072:gMSjOnrmBRMqqDL2/mr3IdE8we0Avu5r++ygLIaagvd5ChB85ndCQl3C4QlsYbht:gXjOnr66qqDL64vdemEQllQlsAR

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e2162007ab8632ae4be090954e40cb82_gandcrab_JC.exe
    .exe windows x86


    Headers

    Sections