General

  • Target

    NEAS.2023-09-07_78363995db307b65e6e6544e4a460f47_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    78363995db307b65e6e6544e4a460f47

  • SHA1

    5987ec38d70bee03171a5afabc92195548e433c2

  • SHA256

    11ecfe51a7ddb844bf7cbcd9ba464fa4ba12b4a3795b98e6e3d1b4c997cde1a9

  • SHA512

    70c4788174784e93785ca25ad40784d6c1bc68477b27bf8ecc9a3281347cea0735e1838fdfd02ecd5dabf80cc77c188116b5c78312ecabf9791d47f36a3221ed

  • SSDEEP

    1536:ogSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:oMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-07_78363995db307b65e6e6544e4a460f47_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections