General

  • Target

    NEAS.3aa0935d6942e0f17c10b72dad45e340.exe

  • Size

    73KB

  • MD5

    3aa0935d6942e0f17c10b72dad45e340

  • SHA1

    08a5139eb0668ae753efd68144d24ef9308214b2

  • SHA256

    808e7d8c09d8cb3e6a6907d05b76de82deda7e87e8d8e1e3b3cf0b7425e302f6

  • SHA512

    ab6c48abaa6be1af53d399c7f2160fb5a9b6a8ee41b93194eaad16a195bb41a9d793b6a043aac105c05dd64dedf5195acad223483db749486c4d762f7c1337cc

  • SSDEEP

    1536:N555555555555pmgSeGDjtQhnwmmB0y6MqqU+2bbbAV2/S2mr3IdE8mne0Avu5r+:qMSjOnrmByMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.3aa0935d6942e0f17c10b72dad45e340.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections