General

  • Target

    36a35c3206ef2bb9fe96dbb7fd7ebf8a_JC.exe

  • Size

    73KB

  • MD5

    36a35c3206ef2bb9fe96dbb7fd7ebf8a

  • SHA1

    2962c0e57066d43e17a65e751f49b3f3b6646c95

  • SHA256

    8a8e661a6c33079754c9a7295e7d017e00a9ccd0f3538d8b509b258f780f9359

  • SHA512

    ddd36e2467f64d4585af1644e367a0bfd40f70c5f29970c300e3a32673d14d2edf818274b4fb0a5df10206e48cda1c504dfc034ea4e6bb7f8188b25470a0d5c2

  • SSDEEP

    1536:KgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:KMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 36a35c3206ef2bb9fe96dbb7fd7ebf8a_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections