General

  • Target

    b048d3de8fafb5_JC.exe

  • Size

    73KB

  • MD5

    b048d3de8fafb58f73f5bb44b39a9083

  • SHA1

    6407dce1794579b9cc637df194a825cdf275f3a7

  • SHA256

    1e0a449c70760dce8368cd136928dcc3286252701b34fc691c27e3127b42e3e0

  • SHA512

    c6b6668b3920ad9466500c1149767782acbf3023f3c7c1d321b3ad1e211d06b126747b5bf479bb2abff42d482b3577d865e16a1489264aa878e90de32c944ac0

  • SSDEEP

    1536:rgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:rMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b048d3de8fafb5_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections