General

  • Target

    57c1790b11f7c3_JC.exe

  • Size

    73KB

  • MD5

    57c1790b11f7c352e7844f004c8dcdad

  • SHA1

    48136e8b542b5735676bd757ccdd2974fcceddb0

  • SHA256

    acb02447ec1cff87ed73fbd5bcd26c0ce14efee19daec565be5c867e4efe890b

  • SHA512

    86c9406622626f9fb7854898c761ae0260d7078c80ca56c912e844d0dfb97deaa0cf37c3d8c16c7a09fa8eec3365a0a1cd16e1355239be43d4ab9d6dca5e279f

  • SSDEEP

    1536:255u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:8MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 57c1790b11f7c3_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections