General

  • Target

    b5a5cac565226907304204689f205b8d_JaffaCakes118

  • Size

    73KB

  • MD5

    b5a5cac565226907304204689f205b8d

  • SHA1

    a19bed9d14d8faf6d8a647dadad5df72973a97f2

  • SHA256

    22c9b878b7ad6ada2c76e816df7f63b94b46ec867e95a8d3f6000fcbc5953136

  • SHA512

    352517c9bafee50698d52ca987a8916a1e2133a5510bf5b0bf5038fb5304239856e91fcb7c4205e29dcd130f2b00fe19f6b099036281387f88e07f7a9317e4f8

  • SSDEEP

    1536:r55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:XMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5a5cac565226907304204689f205b8d_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections