Overview

overview

10

Static

static

10

56f4ffd120...eN.exe

windows7-x64

6

56f4ffd120...eN.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56f4ffd1209a1db5dd8568d62ad414d87629d7f3a4ea812d0a46042b56ed24beN.exe

  • Size

    73KB

  • MD5

    8eabde2efee34e7297e8839265586a20

  • SHA1

    dd5c8fa72bca83d78897e5d541d2a9f05d3c21f6

  • SHA256

    56f4ffd1209a1db5dd8568d62ad414d87629d7f3a4ea812d0a46042b56ed24be

  • SHA512

    f1fd491a70528b62f12811a3945c1465636f848a8b3655ab63bd2355885b97a542a59f79a84b4ad521f2524c01ae6c5d8e33506f83fe0603fb649cb084cdeb93

  • SSDEEP

    1536:EgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:EMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10
gandcrab

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
    gandcrab
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56f4ffd1209a1db5dd8568d62ad414d87629d7f3a4ea812d0a46042b56ed24beN.exe
    .exe windows:5 windows x86 arch:x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections