General

  • Target

    22881157b15ed8exeexe_JC.exe

  • Size

    73KB

  • MD5

    22881157b15ed87763e6fe0b889b4a14

  • SHA1

    4bac4537728a59ab09508ff99fc22f45fb4f0826

  • SHA256

    56b1e97709cc807d9043de883bea856b7ddcd8f83de1344b16e38839cc99f823

  • SHA512

    69097ee788caa618d7884f76f7e12e2099e747d630894d0c5e3fc1253d95d96cc99a5a61c42b2684b00ab19d94e45da41d7cdda683f68a9e5c5cab6a0fdc7b2b

  • SSDEEP

    1536:tgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:tMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 22881157b15ed8exeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections