General

  • Target

    13378f519f9306exe_JC.exe

  • Size

    73KB

  • MD5

    13378f519f93063984428845a759175d

  • SHA1

    12a4f684f22527b3411ead7fed7e0e0990bf624c

  • SHA256

    a9205ff09404989773b24c3360cb03976ace988aadfc984467e2d5ba2cf2c0f6

  • SHA512

    9c9494ac77585dabe5dda1e00c937867a1b6da73ffd1949aaaf15107bef838b9f21c6a6c43138ba14ec57873ecb821b3b0799f4cd1fd1e61d56e2240f024bd0a

  • SSDEEP

    1536:dgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:dMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 13378f519f9306exe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections