General

  • Target

    NA_NA_211c48c864a5adexeexe_JC.exe

  • Size

    192KB

  • MD5

    211c48c864a5ad040a6225c9c284931e

  • SHA1

    a6fbc52a377c32780d11077ce80735e783028fba

  • SHA256

    f47c135ebf5011d1e5a55a81262610466e885f3c47616244137543bc5e900cf4

  • SHA512

    d257b9b37582916d2f7c6305e65a01c352856457470db1be0affcdf1d15eef5e06422eff08a304f0d5d04fac7a87f576dd49b4d7d59a573cc8438e3eb46de956

  • SSDEEP

    3072:gMSjOnrmBQMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdVj5XV82IPFk/dymftMb73:gXjOnr6bqqDL64vdBkKomftM00iu6P5

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_211c48c864a5adexeexe_JC.exe
    .exe windows x86


    Headers

    Sections