General

  • Target

    f480feac7554e848394c998018db6db7_JC.exe

  • Size

    73KB

  • MD5

    f480feac7554e848394c998018db6db7

  • SHA1

    f387d210564f51111af783b3bccb2631c5daeeb3

  • SHA256

    6a004a49f2576e764e7b3d6391b5fc9f21e400d35e08832fc7526aa82c4bbba4

  • SHA512

    a5f14ca98605d7e23883d602a4b58657976f493ef368a319ef451ea62067d6c5d95ddb62a35e68c8ca793c6e05d7392e3cd2b20c64e6494b16ec7826b26671fd

  • SSDEEP

    1536:P555555555555pmgSeGDjtQhnwmmB0yKMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rf:QMSjOnrmBiMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f480feac7554e848394c998018db6db7_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections