Overview

overview

10

Static

static

10

ae4803a8ef...18.exe

windows7-x64

6

ae4803a8ef...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    ae4803a8ef3fbbd57c3958c373f5742d_JaffaCakes118

  • Size

    73KB

  • MD5

    ae4803a8ef3fbbd57c3958c373f5742d

  • SHA1

    b267f5aed50e86b102fd13f1ab7204839b7f8f17

  • SHA256

    5c5dc98afd7d4b905a66b147ce61476c8d95e87ad8bf436822cfe808a49eb8cc

  • SHA512

    489ee61f46452e44b18812e733f029d813db6279aaf571182df7f77014df261e6ce73cc7d4a695727922429580e3ff89982bdf9d1d1f9f3bd08a02f33ba9a805

  • SSDEEP

    1536:F55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:NMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae4803a8ef3fbbd57c3958c373f5742d_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections