General

  • Target

    be29c47df112a8_JC.exe

  • Size

    73KB

  • MD5

    be29c47df112a865cf9446b19638725e

  • SHA1

    93debddb9c7b20a26991a0c5a746cfbea181ebf7

  • SHA256

    8d06951743d661def00269718f78f5c82c9f9a03900181d14e72c90afe468f58

  • SHA512

    e3caafa4ec4ef1d7c972889e901a8b025a991048dc36db848a65b5439f468f8f7add494121be85bad6ea9d99bcef042061b84fcc459d988c9f478366ee73790e

  • SSDEEP

    1536:X555555555555pmgSeGDjtQhnwmmB0yl4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5+:4MSjOnrmBd4MqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be29c47df112a8_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections