General

  • Target

    NA_NA_19d118b9335868exeexe_JC.exe

  • Size

    73KB

  • MD5

    19d118b9335868f875005ec7025506bb

  • SHA1

    730c6e334b8f34c01085cbf4acc4dd08fe009a64

  • SHA256

    6583caa676b6abb1ebcc6920a3e50680c27ee989f49875fc64c9d3a141de578b

  • SHA512

    128845425100db307e163377709d3b3d917d178240e8814876e3548da1dfc5e0b637b7cd9d2cbee0b4e4791057d5610631be20cea9c25ac8d58f9edfe97f04ee

  • SSDEEP

    1536:Q55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:iMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_19d118b9335868exeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections