Overview

overview

10

Static

static

10

483fc07f1b...18.exe

windows7-x64

6

483fc07f1b...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    483fc07f1beaf07afaaf1654e7f8eb22_JaffaCakes118

  • Size

    73KB

  • MD5

    483fc07f1beaf07afaaf1654e7f8eb22

  • SHA1

    62be31a266e466cf939c183b7c6ed35dafc7607c

  • SHA256

    de5b756be91b222e26af91667433b9c1e3d08ffd831583f12a5f36d8d2a79865

  • SHA512

    e8e388cfcbe9ea4878c1f191d88b49912caad94ee57abf06e03e70675f61f6ef494b96ec22bb6b5b515f5df3219473855d4bd0b2b8f51105f20422fe77825078

  • SSDEEP

    1536:W55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:cMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 483fc07f1beaf07afaaf1654e7f8eb22_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections