General

  • Target

    63ce1bd123ac37_JC.exe

  • Size

    73KB

  • MD5

    63ce1bd123ac37f78362bfd8b31fd665

  • SHA1

    0b6278ee8226e20afc747a510edb25a2ac0e147c

  • SHA256

    c0e42d26d01b05364dbcfced49533b8136ae0b422b772d48fd31ce111189d6fa

  • SHA512

    a494909a9bba65ceac7fba263f5f85a32299417f915f8ce165dbf36b207b3b49b49bfe283247ca1f4610ae324efdb03ae7c3798fc34f6eab9ea30384e35ea8d6

  • SSDEEP

    1536:v555555555555pmgSeGDjtQhnwmmB0yl4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5+:wMSjOnrmBd4MqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 63ce1bd123ac37_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections