Overview

overview

10

Static

static

10

326f678c7e...JC.exe

windows7-x64

6

326f678c7e...JC.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    326f678c7e0f9328c25b597d46ed3f71_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    326f678c7e0f9328c25b597d46ed3f71

  • SHA1

    adf5f8130f407a480c5f61d3e986fb370bab77ef

  • SHA256

    eb836280eb253ae23614818a428b30b239991318ff71ab264d6cf4cd086c6986

  • SHA512

    9ef9b758a1dc41048503ab60d5768415fba30b46324c9e849f69d0bf94dbada98b43431b46035c3f2c341953a5c15bf3f86a7fa54ffe939a28b7b06696ed1d6b

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0yaMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rW:gMSjOnrmBSMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 326f678c7e0f9328c25b597d46ed3f71_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections