General

  • Target

    16f9107d6adbd8exe_JC.exe

  • Size

    73KB

  • MD5

    16f9107d6adbd8fab90155c54b98cb79

  • SHA1

    318e89f87aff712fb244ad10be0f33f95805e43e

  • SHA256

    c7f6908e711bfd4cf446a29e1d3861988f097953d362bcd8dc7deb6829e1ec04

  • SHA512

    4a85c4d4d2ed835690a09eecb5255a03f12a02bdc2be44b88b9f9813bcda993e21121d2afa448898a3cb7ceb9ca0d58ea45ab0b78bb1f869e679b91505821002

  • SSDEEP

    1536:g555555555555pmgSeGDjtQhnwmmB0yXMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rC:dMSjOnrmBPMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 16f9107d6adbd8exe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections