General

  • Target

    NA_NA_187149b24c7800exeexe_JC.exe

  • Size

    73KB

  • MD5

    187149b24c7800bc02d34be3fa055d26

  • SHA1

    98122eaf72a88b59881fda025e67060bceb8c08e

  • SHA256

    f2a25c0e7e48b16f398279ad9baee469a70c386011433bface33c626821e4c0b

  • SHA512

    1ba67b26cefef852f3bc9203752a2bf24c62b0ebac79197ae1d1a8e266d36741d86180c85d33f03ff6ffac79a87def5dd38901e172cc61eea70de019f68c9465

  • SSDEEP

    1536:ZgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:ZMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_187149b24c7800exeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections