Overview

overview

10

Static

static

10

5b8a21a6ab...JC.exe

windows7-x64

6

5b8a21a6ab...JC.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    5b8a21a6ab87065b6c64cf1a4840fa16_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    5b8a21a6ab87065b6c64cf1a4840fa16

  • SHA1

    9390fa7bc6cec58023825f4b04ad32e65addf530

  • SHA256

    2474459ccdcb99a5cc84c1bdec682397003dd313f1ca3ca95b352d23c9e0c3c1

  • SHA512

    83bd2559be4fcef58f19a942dd4db8616a045ce2631ae4f90838c16bf38875026a5ee576db5987fb552377164090d882aaef0e8e5bba40f5d294c6a32a96cb7b

  • SSDEEP

    1536:E55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:WMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b8a21a6ab87065b6c64cf1a4840fa16_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections