Overview

overview

10

Static

static

10

304ba51c99...JC.exe

windows7-x64

6

304ba51c99...JC.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    304ba51c99a5f2bed8c2c41c3ca5ffec_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    304ba51c99a5f2bed8c2c41c3ca5ffec

  • SHA1

    dcab9c6f32fe3299e67ec56b9c2bc6e0545d759a

  • SHA256

    8b96191e3b8d54f87860b8bdb54c46a4261a91f1f5d3c715aad16053a7752fdb

  • SHA512

    119d17f2f49f3b033c2d4f5640b5142fcc34556861692714ad325b5f988cdf5d2a95511672b7e5efbda623cae907c939a50869ffaf88251129eaa55d8c25ab56

  • SSDEEP

    1536:h55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:JMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 304ba51c99a5f2bed8c2c41c3ca5ffec_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections