General

  • Target

    1e9980beab5d77exe_JC.exe

  • Size

    73KB

  • MD5

    1e9980beab5d7735e9e0b580b89cb71b

  • SHA1

    8621cb3d3dbe4f9f959437baef44415acf193711

  • SHA256

    d19c2f7b8d0468beecf2cf6a5e90d97aa99abd130e2057cc438684d9c32400a4

  • SHA512

    dea5478e1bf5edcee2ede721d7b2645f57bd6409159750e0d674a53599374ce6105d21114c2c63fa8cfa38a254d8d4e87369bdd7378bd7f59072fbd5c78d83f8

  • SSDEEP

    1536:N55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:lMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e9980beab5d77exe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections