Overview

overview

10

Static

static

10

d66597b939...18.exe

windows7-x64

6

d66597b939...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    d66597b939ee4026e96a05a394b3a98b_JaffaCakes118

  • Size

    73KB

  • MD5

    d66597b939ee4026e96a05a394b3a98b

  • SHA1

    139211798a50edadd537b1d538efc9b569815341

  • SHA256

    224c26c3176931fbbdb313423f9e23b5addc1765edd0016899e3405f02ecd821

  • SHA512

    7e0f16a529d3bffbd0c85d1dc14d1471da3c91698afabf66087b25b635adf906d5027a92f9bd6a378c32a473a38bd4c32b9ab68f42784e1a010a555e94e558ef

  • SSDEEP

    1536:755u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:HMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d66597b939ee4026e96a05a394b3a98b_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections