General

  • Target

    7fa94de50a2189_JC.exe

  • Size

    73KB

  • MD5

    7fa94de50a21898bfc9e253353fd1920

  • SHA1

    451c180a42a82b3252d4dabdfd1a63291032ac78

  • SHA256

    dc6e817a055e095efa61f180824936c922c4fd47e7fcc50d22ca5a2a8d88b140

  • SHA512

    e7606a8e03460702d0dc132eef3ee4c123d4b92d4c083a2f031f566cd5b090de54f5f7775235dd6e3345e44855b6dd41aa856aa6e6ccf3a446e3986cb9aeac31

  • SSDEEP

    1536:bgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:bMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7fa94de50a2189_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections