General

  • Target

    32b7e9fbd6e877_JC.exe

  • Size

    73KB

  • MD5

    32b7e9fbd6e877a3bd4376e474595e8c

  • SHA1

    cb61db7ab06fec338d49064752623958d9dc11bf

  • SHA256

    6e7e0955d2cb72e69ba304feaf0954e1079142ca31ff6c0095ab431f61ebda4c

  • SHA512

    f9c351be9c2e21a3432ffcd1f9fe135f1d1d0db6194f4b0d0a0efd6b84f8bf63dcc860c76fab8a5691e03d17063a6f63557fbde7cdb50cc866c6ed757dbd4c79

  • SSDEEP

    1536:HgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:HMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 32b7e9fbd6e877_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections