General

  • Target

    NA_NA_1cd584f3a407d7exeexe_JC.exe

  • Size

    73KB

  • MD5

    1cd584f3a407d732d44f1dc919030f61

  • SHA1

    fa0e2673083b6953b5d2d709b4e8fcfc7116fb58

  • SHA256

    ce228c47f531a952200907e44f32b510c7ec4b21eebd19962df73dfbd55698bf

  • SHA512

    bc0e89dc0a8f55a46df55855c3e4cc77c86628a11aac64578608065ae80b708adb8d4c163014ab9dd469d73a858e774433852d9717a61fcf34136d810bebabaf

  • SSDEEP

    1536:kgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:kMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_1cd584f3a407d7exeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections