General

  • Target

    NA_NA_1ad64ef5678677exeexe_JC.exe

  • Size

    73KB

  • MD5

    1ad64ef56786777881ecf6a8a133702b

  • SHA1

    6d2ac1f124d35dc22b6c487754d60098cd1450f9

  • SHA256

    161eeff5564fe61cac71e0f32dcb7d53f0f59de883ba0b97af4f39b495475718

  • SHA512

    db7d1f7a5b9d14a994c9f20117d0f4ffd663e6d85df7699ec3f72d3074101e47fe806c93a46475dd9acdcfc30b7b785d5de4daa9b5a156d1447a9a1b80496655

  • SSDEEP

    1536:UgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:UMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_1ad64ef5678677exeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections