General

  • Target

    NA_NA_127de4714e6fb3exeexe_JC.exe

  • Size

    192KB

  • MD5

    127de4714e6fb3a4aac02bba582b6858

  • SHA1

    2c2c4ab0445f380f0272e58b677eb2c3605b2a06

  • SHA256

    61b1c8a10f3cf6d201b9251c3b63e8327cf9d5302541fa3a76beaff109da8aa0

  • SHA512

    212b1249c59672da16ca1a53e360148ee8f861e04ae222da94e9ec9a287130e0b333631954ef466d27565589a6bdde31ed7b20eb134acfe533d1399d603f6ad7

  • SSDEEP

    3072:gMSjOnrmBQMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdAj5XV82IPFk/dymftMb73:gXjOnr6bqqDL64vdwkKomftM00iu6P5

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_127de4714e6fb3exeexe_JC.exe
    .exe windows x86


    Headers

    Sections