General

  • Target

    f889b46491b7db2beef9b50af5158f8e_gandcrab_JC.exe

  • Size

    96KB

  • MD5

    f889b46491b7db2beef9b50af5158f8e

  • SHA1

    1b3c5d9edf62bd9dc504cbb0fab8622fdaf1eedf

  • SHA256

    0424534e0e1e43b8ec45936c4a720a42c25dad421fcf8bb63275be183ad3877a

  • SHA512

    cc3e14423b6956035804a69c10b36cf1d539908d06a3d24a6a73936243b0ce30e440b18451dcfbb15a0f981a2d55d52da056241ee8b1b7a0a9fa3fbe354a46db

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0yyMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rF:gMSjOnrmBaMqqDL2/mr3IdE8we0Avu55

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f889b46491b7db2beef9b50af5158f8e_gandcrab_JC.exe
    .exe windows x86


    Headers

    Sections