General

  • Target

    NA_NA_243dd1d6294180exeexe_JC.exe

  • Size

    73KB

  • MD5

    243dd1d629418027ee75ed3a2d6b962d

  • SHA1

    8e2c1974648f7fe81424f200cbd3b5eb311e7abb

  • SHA256

    61c3fcb614b4ccc57451b38564d13108febd329d69af0043957ccd72e117a329

  • SHA512

    8ad88d8ab13d78560c7da32afeff7e91ed9bfb08beb11082b4ed831d4383502cce864479bf7c70a214d360d236b7d149b55c3ee5dcdb184245e6c79f7818bf79

  • SSDEEP

    1536:K55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:QMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_243dd1d6294180exeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections