General

  • Target

    1d905be5a1800aexe_JC.exe

  • Size

    73KB

  • MD5

    1d905be5a1800ad1f4a7205bace9e379

  • SHA1

    7b6bd7cb2e58684e2148a8bfdf25c90a724a9250

  • SHA256

    e3016961987b3d20282abb0553cfc34c0fc09f1161c0218483f7b324c4580de7

  • SHA512

    28d24b16682a16c19c94d71e1222fa9d1a5b187956368909bdb9bbeaa079c85e3cdcf653f8aaf15a72ea92b70b36ec46f6e5535385f7940735a9111af81616f1

  • SSDEEP

    1536:V55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:9MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d905be5a1800aexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections