General

  • Target

    NA_NA_134ecdb98b06a5exeexe_JC.exe

  • Size

    73KB

  • MD5

    134ecdb98b06a53e7aef3390d69e7ce2

  • SHA1

    de96b497c516afff64e1853ecd05c6e8be3b6ef4

  • SHA256

    292ed736d7ea427ca8c084e7d1930efd37e0f7f79ff55b08dbcca27c29fa3aa5

  • SHA512

    35a71dbe5f857740df7f1f033c88005ace9edbfd088a8a99c4b48c612917305d7d1f449475d3d519db110c732b4c658e321cfdb35eed7c695c431d52e623cd9f

  • SSDEEP

    1536:e55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:0MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_134ecdb98b06a5exeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections