General

  • Target

    NA_NA_23a3109c779d00exeexe_JC.exe

  • Size

    73KB

  • MD5

    23a3109c779d00e13d19ad7657e969a3

  • SHA1

    c60625b9eb5c3ab72f837e18959cc4c139cb146c

  • SHA256

    8b65bebd4758653d2dc374afaff845a82807192c54adc9fd310c6143c9e0d446

  • SHA512

    819ff9b8bc51b9df518f33c897eddbc7502624b4af64765260c60f8166d5dbccc1370035e6ac8775135ae2a2fe5479792a8cc984e0b4aaf345aa9afad2ea8357

  • SSDEEP

    1536:955u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:1MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_23a3109c779d00exeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections