General

  • Target

    NEAS.2023-09-05_9bcf204fbc61ff4b3c2ef698cdb365cb_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    9bcf204fbc61ff4b3c2ef698cdb365cb

  • SHA1

    8e7dc2540b1dd53286d8ae957642e67f4960e01b

  • SHA256

    29e6da42ca9e538b1c9f36ea92540f677abe91a2cd93f47fadfccbe28dee6a22

  • SHA512

    df364f5ef38969241133f3dbae2f65d6084c42ac60803d99ad990b932dec1524065de82d76c2ef4e0cac1345d0db93e85b21ba82e0380ffd18a7d861dbb401a3

  • SSDEEP

    1536:H55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:jMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-05_9bcf204fbc61ff4b3c2ef698cdb365cb_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections