General

  • Target

    b20c8342993c02_JC.exe

  • Size

    73KB

  • MD5

    b20c8342993c0254550e63b80a66952b

  • SHA1

    95a9b268db477d871d57b99908c0883f68e1308c

  • SHA256

    29e23f78690911244be109e55c9e8940b395673117df0020bf976dc6aa59c534

  • SHA512

    83241bb9891b143c8884af8bcf1caa538b4d174650d5057bf5afb7a67d8278a5987bfbe1c27508ac8e99e04eef6976e27a057fc7e16fe3000eb51861f4df7f86

  • SSDEEP

    1536:+gSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:+MSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b20c8342993c02_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections