General

  • Target

    NEAS.b9998f6432d193cc103e9a45caed2180.exe

  • Size

    73KB

  • MD5

    b9998f6432d193cc103e9a45caed2180

  • SHA1

    049c07f09b606cfe4f90ea831d7b10605d25c0db

  • SHA256

    3c3711c0d698bff688b821ee04b301a147eec5473479bc6e7deb945cd184d1dc

  • SHA512

    0f79459ea5f458bf5b320305ff012a427373721f849ae3aacf835bd86e0eaec0cfda9c40d8a0798af49713de673537ffcee4f0425683b19c096b297ee160b713

  • SSDEEP

    1536:d555555555555pmgSeGDjtQhnwmmB0yKMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rf:aMSjOnrmBiMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.b9998f6432d193cc103e9a45caed2180.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections