General

  • Target

    7e8205cf0878cc740f36202ff226551f_JaffaCakes118

  • Size

    73KB

  • MD5

    7e8205cf0878cc740f36202ff226551f

  • SHA1

    372befaa022d26d7fdce6b7b72f8605f261001f5

  • SHA256

    6129127c620892f4a0a0958d20c8faa0e6f7490f942a28a3423d857a6c7abd5e

  • SHA512

    3f5ebfe9a3c487a4d74edf65accc3e3f31d132f4f08feed19e17fbd0cb49993d53fd975b6f2db1657c0ccb7130cb442d75c4bfb12741881ddaf5ff7637f5c491

  • SSDEEP

    1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7e8205cf0878cc740f36202ff226551f_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections