General

  • Target

    NA_NA_1ba84017c7e3cdexeexe_JC.exe

  • Size

    73KB

  • MD5

    1ba84017c7e3cddec259e017a8972c95

  • SHA1

    8e214cdbbba743e6c5d957c5ff5db1806dd1d2c5

  • SHA256

    b1ee4737a8604910055a1982a395f98c8ebdb02ea35a7a0135e57187a112e191

  • SHA512

    f7d4c516119e0326b7681e2beb816005c507db6b6090635e1995933e6af68823eb029eb12666b2aeac84ab05bafb6f70bf7d859dd3dd22a3e96bba9ddadc140e

  • SSDEEP

    1536:Z55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:xMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_1ba84017c7e3cdexeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections