General

  • Target

    NA_NA_1b76bb14877d89exeexe_JC.exe

  • Size

    73KB

  • MD5

    1b76bb14877d89fc6db74052984efa5a

  • SHA1

    2594fdb44b90eb5cd857bee0bf92123d8b1ce6fc

  • SHA256

    5d2603e820fe73eaa7998e44fd1eebf15b60025148c0f2e5bf405cafa5d3f217

  • SHA512

    fcf98de3eb16cb59ff105e3b897f10d70e20b3713d51e99f67036ee2d295b9eae497ba5f8cacd4682d6826a3452562828cc684c20452a2ad89553db0c4a8b909

  • SSDEEP

    1536:j55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:/MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_1b76bb14877d89exeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections