General

  • Target

    9c4713a38f312f_JC.exe

  • Size

    73KB

  • MD5

    9c4713a38f312f056fd3982d438e7b43

  • SHA1

    65751dea138640e1df39a7997994958aa7e10a67

  • SHA256

    22fd9b572d9f3e6f5b0041158d11b3f5adba0fda3855a25aac489bc977a37a1e

  • SHA512

    5c7cdf71cf243a1e7c0557d28f9173334a03c93b92e9c4dc157ffa62ffb718405f3b63e60fe02dcdbdcabed74f7fc0184e7e620722d9aa3ab1dc78f8688602c8

  • SSDEEP

    1536:4555555555555pmgSeGDjtQhnwmmB0yUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rK:VMSjOnrmBsMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9c4713a38f312f_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections