General

  • Target

    6b95d42db49343_JC.exe

  • Size

    73KB

  • MD5

    6b95d42db49343d1b2995517763473f2

  • SHA1

    b0902ec1f76d181252f1d049305ed6d8ef2ef80e

  • SHA256

    0129677cf4b201ed361d25333904231dfde62678d66bdf89fc2244c1b69a9c5f

  • SHA512

    72e73d27020e785cd186a157c7a5a7a8d90e7b87e848e6738b11677fd4b31d78855303bfd26603a1f9113714e860f15e18ab7cd32e8e6eb997464706224bab7b

  • SSDEEP

    1536:f555555555555pmgSeGDjtQhnwmmB0yUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rK:AMSjOnrmBsMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6b95d42db49343_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections