General

  • Target

    NEAS.2023-09-06_50b866bc3f2ef7b769616b9cd9092363_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    50b866bc3f2ef7b769616b9cd9092363

  • SHA1

    ceb7fbebc690636433e4608aa429cbc8c64cf981

  • SHA256

    5d8338e8a2fbeee8d8d00870d9fc5c5bc2aef3ad9f852695170c991436205b4e

  • SHA512

    6a0180934fc1d04bfba94767e10347e4e657a8f2fe472db3385239322561c81bdd4f3dc295009bd6f1b91de772f2970cb3effb89120cc5c58cb844120cc7e576

  • SSDEEP

    1536:5555555555555pmgSeGDjtQhnwmmB0y6MqqU+2bbbAV2/S2mr3IdE8mne0Avu5r+:GMSjOnrmByMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-06_50b866bc3f2ef7b769616b9cd9092363_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections