Overview

overview

10

Static

static

10

993a5a9808...JC.exe

windows7-x64

6

993a5a9808...JC.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    993a5a9808b69ca449d4cf0cf6c5bc21_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    993a5a9808b69ca449d4cf0cf6c5bc21

  • SHA1

    1a189c077fbd2bfaab8dd52eeb6412a26396f34d

  • SHA256

    55cfff11efecdba8f2e9986b7cf531581ba680c3d8f813a8a62d9b76ee1b9dae

  • SHA512

    a42c1f13a8392289ce2d0f54d681a558df862bcb7b1c88b1b7492d5a44abea95e7eca5d642cf3d6b37631e39206d2d3643951bd8dba9702d541cd3a50b1a21db

  • SSDEEP

    1536:t55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:FMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 993a5a9808b69ca449d4cf0cf6c5bc21_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections