General

  • Target

    c8a0bde9b2dcd045d4909382be63409b_JaffaCakes118

  • Size

    73KB

  • MD5

    c8a0bde9b2dcd045d4909382be63409b

  • SHA1

    337128dea75900f1664a0233ea26c6d0c419a22f

  • SHA256

    4387803f1b120ca72bc79f4adad93d6049d1fac1365df94680d20680a1ec21f6

  • SHA512

    729ff969f88292c8d2b1bd17313be66d7397b15ea4fecf204528ad53dd9f42054f08318b022ee4ed168298cfdb4bfb9fe5641d207c55af327649093d36bc9118

  • SSDEEP

    1536:w55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:CMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c8a0bde9b2dcd045d4909382be63409b_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections