Overview

overview

10

Static

static

10

38a031ce5a...JC.exe

windows7-x64

3

38a031ce5a...JC.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    38a031ce5a8b1ad9f8eaebe369603ffb_gandcrab_JC.exe

  • Size

    194KB

  • MD5

    38a031ce5a8b1ad9f8eaebe369603ffb

  • SHA1

    2b88b3eacd532a50c0e6df9dd1086a9c5581c656

  • SHA256

    28be95f770097e03b7cb07a56467241ebbc68391d40738b41f4b697f11731604

  • SHA512

    1bf9076f2d4acfc8b0f3514197639afb1ad69d32cf265a94dfa66b656f7b9b6149292aa3b9bdb9aa295355692abb34852a142c5329e1abd2c45a2ddb3bd5b904

  • SSDEEP

    3072:YD9tBYvOqQeC6jVbOPP4MqqDL2/phDMkcUkIwofej9Q7WWdE+FBaDmh8CohxggEs:6tJIsPzqqDL615vdmf

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 38a031ce5a8b1ad9f8eaebe369603ffb_gandcrab_JC.exe
    .exe windows x86

    7b6dd4245c054681d7b6b1f9b76fe984


    Headers

    Imports

    Sections