General

  • Target

    1426bc9e94ca3652fde35943815c50c6_JaffaCakes118

  • Size

    73KB

  • MD5

    1426bc9e94ca3652fde35943815c50c6

  • SHA1

    03843baccda70c9785a4bf86fc2d0c2cb7d2eda1

  • SHA256

    9d1d3e8ca29b0c5b7f2d8d3da142a51d986ebb815b9d5f96a7e1e7bcf9b25632

  • SHA512

    ff423f913b527dd878cb4addcc52e9d5060f7f028e2acf48a6f98c2927e123b874394754c3705fb0ff9cf7f42170dc64384dd4e0faf6ac84a67fe25997acaa06

  • SSDEEP

    1536:s55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:OMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1426bc9e94ca3652fde35943815c50c6_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections