Overview

overview

10

Static

static

10

3aef549368...JC.exe

windows7-x64

6

3aef549368...JC.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    3aef549368a8ba7089c6f24e64808241_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    3aef549368a8ba7089c6f24e64808241

  • SHA1

    f7be07db367ad7e80d5da4cb1668ee0916ca0d16

  • SHA256

    8ec48315e70737d3b53312aadcddcd0cbf97ea3d274a7ea91f25696edf389486

  • SHA512

    de6ae20fd7372427ea247068e30dbe367e4e0eaebb11d902b63e9d81acc732a58107f6245b03e1343c94a0745eebcb5b9a7f0d7a70c610df548dd53d833a0179

  • SSDEEP

    1536:9555555555555pmgSeGDjtQhnwmmB0yQMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rh:6MSjOnrmBIMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3aef549368a8ba7089c6f24e64808241_gandcrab_JC.exe
    .exe windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections