General

  • Target

    f55f05f2ff6d5827874ca95c48884b25_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    f55f05f2ff6d5827874ca95c48884b25

  • SHA1

    a343d2fe0ed70b013408eb8980ae1f448432d9b0

  • SHA256

    c2f51a48107808a2d61da678f4de9587c6171e05a4717e88fb89b5ebbf778267

  • SHA512

    5c624b6e3e061950b0149cb9b0693b2017af50ab9f0d5e337c139dd2f6e0eef42c1dfe54f940bd53e3ea6a689cb0910205962ebe2c1958a4a8f052d703a828d9

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0yCMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rg:gMSjOnrmBKMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f55f05f2ff6d5827874ca95c48884b25_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections