General

  • Target

    f16cf7f540eb0aexe_JC.exe

  • Size

    73KB

  • MD5

    f16cf7f540eb0a814fa5096d94531aed

  • SHA1

    e7410357f318cdd278e41920cdf6342789bec056

  • SHA256

    979efae62dae1c2eb1fef572b4d2b4755c0e8d9bf44c534754219e0f4c272641

  • SHA512

    c92c1e0e381edc4cd5aa3212b811fd2fcafdd210749d2bd725049fdf066943e7b0683d73ff5692826bcfd9dd34ea1ff2b834d6c4ed3df17e8de2a6a6ecc43213

  • SSDEEP

    1536:1555555555555pmgSeGDjtQhnwmmB0yl4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5+:SMSjOnrmBd4MqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f16cf7f540eb0aexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections