General

  • Target

    d4d1130d08c03cb0db17771e1f2666c7_JaffaCakes118

  • Size

    73KB

  • MD5

    d4d1130d08c03cb0db17771e1f2666c7

  • SHA1

    0f3123d537018809304b373617eb4e38e4792741

  • SHA256

    0e7c67995b91782c11883a246a03648db488a4fa92f58a9045179ac1d81bed6d

  • SHA512

    ec173dba1c392b1bcffcef10e89f035812984e1bfb2ef4cf1c4de35b7c9e6983ec51f69664595f994f8ee15cc3cb300bf2b1821ddfd1ebf62afa35b72f578358

  • SSDEEP

    1536:D55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:fMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d4d1130d08c03cb0db17771e1f2666c7_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections