Overview

overview

10

Static

static

10

a38f485b4c...ex.exe

windows7-x64

6

a38f485b4c...ex.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    a38f485b4cfeb6exeexeexeex.exe

  • Size

    73KB

  • MD5

    a38f485b4cfeb6aaefbc17489543be09

  • SHA1

    ae3bb3a8b8e7e34073353fa81259b62a4e15e68d

  • SHA256

    a6932058426a25148fb4b09f003cdec7b0b7228c00b987e8ede66a6c2d2a79d9

  • SHA512

    b5f64dd899c042001f32c11c01c52d4f19cf5181b7a3aed7f8991796d56e58c7b9d898348b8621aa6a1d4e7310e887ff88ad0e5c3497d767030134eed48a5801

  • SSDEEP

    1536:hgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:hMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a38f485b4cfeb6exeexeexeex.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections