General

  • Target

    476fd76c17bc2cexeexe_JC.exe

  • Size

    73KB

  • MD5

    476fd76c17bc2c8b7484548fc0e632c3

  • SHA1

    f04b64e29821e4e982ec55b9033605ca4b783384

  • SHA256

    429a180b8c50b6f5c6a1f9fadcbecc5424d9305c8a27799f4862b99ae1bbf2c4

  • SHA512

    db7733dae37cd77da5e823d2d01df2d0b8ffaed265536812e312cff45e1782dd6335c00b22105035448e6d4dca93618ed2070325d77c356b77efd89ab2b7f383

  • SSDEEP

    1536:655u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:gMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 476fd76c17bc2cexeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections