General

  • Target

    3deac6b1ab24adexeexe_JC.exe

  • Size

    73KB

  • MD5

    3deac6b1ab24ad26ac2a6d9358ef6554

  • SHA1

    007488a819dc0aa8de8f084731c9654e8003c2f4

  • SHA256

    f19b961be958fd68e564272078be092e4f2c211b4627dacf619e11257abc911d

  • SHA512

    54afb7ca095e5ec37311e16ca3b498bd554f1193cb1ca4619c0fa6a58f3f5da2d3853be91e2318817821f6ec355b21da582d1f82a3a7e05d7721d217d5c2b65e

  • SSDEEP

    1536:egSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:eMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3deac6b1ab24adexeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections