General

  • Target

    afcd535cd309b5_JC.exe

  • Size

    73KB

  • MD5

    afcd535cd309b5145a14a76665c64522

  • SHA1

    b3a78fdd461b0e67bf4dce1888f94bf6149ad9b7

  • SHA256

    c3e3143a9cd41ce689861ab7e6338e71fbf784561f75e25a0743af11ffa2dc1f

  • SHA512

    cb56e14b0abaf789c03989319b27c5bbf122046985aa008fb821e9c7b1b77ef1d1c740b1e096733d91078ac56609d6f80735835934e4b0ac7130467624782008

  • SSDEEP

    1536:j55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:/MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • afcd535cd309b5_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections