General

  • Target

    NA_NA_3283f80d721319exeexe_JC.exe

  • Size

    73KB

  • MD5

    3283f80d721319d3b65f50f092cce559

  • SHA1

    2b79b578cb8f07877770dca032d965c989c06968

  • SHA256

    521b12028a25f29befed5369c71cec0c68a050a593a292d09b3546774132cfd6

  • SHA512

    e8faef6b82fe0bc9076cb2c35b68a18ce88d327ceda31a6524e069439b80b171e11391672cb80006449df3da4ac5e7c3e450387f2d7df462b0b4fea67a9bd4bc

  • SSDEEP

    1536:Q555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0Avul:tMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NA_NA_3283f80d721319exeexe_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections