General

  • Target

    9a54407c7006a42a955e78c0b86947e9_JaffaCakes118

  • Size

    73KB

  • MD5

    9a54407c7006a42a955e78c0b86947e9

  • SHA1

    41639cd11a2774d062f467c3f4da0036c5080f96

  • SHA256

    c83482e733061c3874d660066b2ab53165d7c557ab7eff223025c651376b03a5

  • SHA512

    27a26ed65ca5f6956e30c4cc8fb4687d74015423c606d309f0b92d18ce70bc8a3312c644011b3969014b6a355ccb49db12b2ece941aad4de8346a8f680193393

  • SSDEEP

    1536:n55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:DMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a54407c7006a42a955e78c0b86947e9_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections