General

  • Target

    b038f114c83b27_JC.exe

  • Size

    73KB

  • MD5

    b038f114c83b27924d5b1c4f46dfaf22

  • SHA1

    e848b1b3807bcf34a98694909a22090b042c4f31

  • SHA256

    0952c6d463619d7bd6975e205496264b8ab30dd5b235cf7d96e17aa736c88f5f

  • SHA512

    b3f4e3eef93943da0e3662bc17cbf5629958185b06a0d9b759ba40616a4a68ffdad047784a523072afb745850d29e3e522b2672d0364ca81d7efcbf78ae2ef28

  • SSDEEP

    1536:6555555555555pmgSeGDjtQhnwmmB0yl4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5+:LMSjOnrmBd4MqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b038f114c83b27_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections