Overview

overview

10

Static

static

10

78db4aaec5...7a.exe

windows7-x64

6

78db4aaec5...7a.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    e17f4ef1e2e3a39c453757055f849f58.bin

  • Size

    24KB

  • MD5

    c1b6ef5020d253e586204d2875382c4d

  • SHA1

    ce6049742f01ed732a1ffef0b14424c88b207492

  • SHA256

    cb92315654877052153efb96ac8c3e4c8ca39e33fc242ceacedfd4347ba44de6

  • SHA512

    e4dcef2d2dae31d4e9f96c6884e1582b35fab35c7c2593491519933993eb61b4c94f65f47e4653ba0bc3ca16cfad247acb6ae627fd4f2a2716b96d3865e27ca0

  • SSDEEP

    384:Rg8aTRdjyFYMXt639ms+GbtuN69iUXIToghLERho2vHTSlYnMF/nB+Bra8pftZLf:Lo3q634x8A1UXFY4PjMF5+BZ1tfR

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e17f4ef1e2e3a39c453757055f849f58.bin
    .zip

    Password: infected

  • 78db4aaec525b9ac5e7a9a57b7723e338c96a174da1e605fa2ce97b6fc2ab57a.bin
    .exe windows x86

    Password: infected

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections