General

  • Target

    NEAS.2023-09-05_90184effe11d0cf5adf8393e8e30dd63_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    90184effe11d0cf5adf8393e8e30dd63

  • SHA1

    5cb9149126374411e39319566a431a392fb87bb2

  • SHA256

    a35eaa83400911852e2fadc5857aa622281db4e845f1478d59e07b460a5bf62d

  • SHA512

    ef60dc25409a7d1d19069af1346ad682fc3ff2baae4a7678b035ba39faa2af9dcc9ef3c4cb37b98a05467458a18ba190f9f8d98b428288c82f1f1d4ce5c272cf

  • SSDEEP

    1536:qgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:qMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-05_90184effe11d0cf5adf8393e8e30dd63_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections