General

  • Target

    NA_NA_0bb890053386e0exeexe_JC.exe

  • Size

    192KB

  • MD5

    0bb890053386e0894679eab114de0ecb

  • SHA1

    523bf5dde4c699bef98c7dcb58dc1df88adf48d5

  • SHA256

    8d14b075345931c3ac3e5e16c1dd2d3e23846ec73d177413ce08f05776309101

  • SHA512

    68e00c882168dda16576f1ed346732fc2f8c7650bc6f32fd3f82d22118e6cd5ab5a68b1970e9729e354e31f5ea3b89e99482eca3c9b4f913b937a5f13a2d4e50

  • SSDEEP

    3072:gMSjOnrmBQMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdAj5XV82IPFk/dymftMb73:gXjOnr6bqqDL64vdwkKomftM00iu6P5

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_0bb890053386e0exeexe_JC.exe
    .exe windows x86


    Headers

    Sections