General

  • Target

    8410f099449c3a489d20cea17d2bf682_JaffaCakes118

  • Size

    73KB

  • MD5

    8410f099449c3a489d20cea17d2bf682

  • SHA1

    97822cb8116897855bc77625d81abbf463a84440

  • SHA256

    80adbdd89a385bf49ab6185830ff0d7a43330dba0436022124758d57dd4927d1

  • SHA512

    7ab0b50a9cdce78365991b63c6fb235f93e4daaa6e1e8d6aa43fe8ed0f615c9c28c53461f9034a85cdaf822d6cfb737ff4626e2cd29c4ed758c8c297661f09a4

  • SSDEEP

    1536:C55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:4MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8410f099449c3a489d20cea17d2bf682_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections