Overview

overview

10

Static

static

10

3286f579cf...JC.exe

windows7-x64

6

3286f579cf...JC.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    3286f579cf4694e2d394fe0b1c323672_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    3286f579cf4694e2d394fe0b1c323672

  • SHA1

    15c40fabf5e4dfdc869595ac7f356196bb52fcc8

  • SHA256

    776dfd69f4b8fbbc8ecc6bd1a6f0a6bc54b863cca2568a1f772f6fde210c8bd3

  • SHA512

    abb8f22d37e367136fc53726f187cd2925f433d9f7df4078a2f5872b8c9c3e6ebfe6e41e9619a1a117fa0ef0050d9d0947bdde003cf7d98bb933096ac2a9b18d

  • SSDEEP

    1536:D555555555555pmgSeGDjtQhnwmmB0yl4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5+:kMSjOnrmBd4MqqDL2/mr3IdE8we0Avuj

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3286f579cf4694e2d394fe0b1c323672_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections