General

  • Target

    NEAS.2023-09-09_0dced5452f93174e7832bff457231c73_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    0dced5452f93174e7832bff457231c73

  • SHA1

    e2cd5e538d8e05466e3f0b721f2f7faf7b95ef0c

  • SHA256

    e65bffc44504e64fceef51ae7fd3ad69eed318c678948dcee1dd0b8b04ff0acc

  • SHA512

    df9e14bd54d563ed4ff32c053cb59595385ae0477a8a4f53abd9c4fe2986802a6165d13abb7391403b0cffeab8266b5e68a6092692597a3344b09c4ae253eb98

  • SSDEEP

    1536:1gSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:1MSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-09_0dced5452f93174e7832bff457231c73_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections