General

  • Target

    7e4579e3c9ff39_JC.exe

  • Size

    73KB

  • MD5

    7e4579e3c9ff392919f82f2ebd21a807

  • SHA1

    f3cfeacd1a4f09e4f8eb9c77002b3ab65feda9cd

  • SHA256

    ac71d2dd5cf6fb27397a7d5536826c2054b8b55ff1ed7134fc24f3dd76a1ae81

  • SHA512

    e6c9342cd56e8bf80dc94a43ae09dd30e26f07bcfe7e0b158c0afac5453982cb7346e866e4dcc80311fe6b0e8076e4000c02cf4581bc30f5895c5f1e3ac652aa

  • SSDEEP

    1536:p55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:hMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7e4579e3c9ff39_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections