General

  • Target

    NA_NA_253f9e1921175cexeexe_JC.exe

  • Size

    73KB

  • MD5

    253f9e1921175c2d800f7feb8b26d706

  • SHA1

    b2725f275ef52503fd4f042f6a5c6240d133e736

  • SHA256

    388972492c684425d847d1dce87f1293276efa115c4b31a1bd38b2ee4679e862

  • SHA512

    d90be4afdd19f8e8ec7579a5a1c2f84cf640b80d0e4d4e5b9fec0250e66b4b5488570539884a758cf449c0c260313ab7b23a36bd321351ad477d1c181af02bfb

  • SSDEEP

    1536:555u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:RMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_253f9e1921175cexeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections