General

  • Target

    0e60b8a938b984exe_JC.exe

  • Size

    73KB

  • MD5

    0e60b8a938b984b7430be279c5059ecd

  • SHA1

    d10f670f7cfab686f2c76ea68f021e65504c36df

  • SHA256

    9721751c3d4b55e44771794db1bfec67e139b0c9e156dc8866adcedebe71f426

  • SHA512

    3f98f500bf9ed72ff3dc4ae44ac8dbb3742a76ea55d40af12f561a8f238fb5b9fd993b594365166cc0ca02cb6bd5ff8a1f30c1a912f81a7b583324e498135356

  • SSDEEP

    1536:z555555555555pmgSeGDjtQhnwmmB0yH3HMqqU+2bbbAV2/S2mr3IdE8mne0AvuT:0MSjOnrmBP3MqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e60b8a938b984exe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections