General

  • Target

    23dd34d0b81667exeexe_JC.exe

  • Size

    73KB

  • MD5

    23dd34d0b816673249c008e4a02e580c

  • SHA1

    77f713d780d95788baf5b74e47181a98f8a33b63

  • SHA256

    6052868ddbeaa31974d6b4284f5a12e0d55ff13b78688ff2ca1702df217c5246

  • SHA512

    aa44c493451cbffbd1c83f9d096e5ee94f610e7cc6d3bd4a0ccfa243d2352109fb4e0a31f1bb992ac4ec2f1d87e2e236a1aed2df9c53e3f35782aa3783839aba

  • SSDEEP

    1536:xgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:xMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 23dd34d0b81667exeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections