General

  • Target

    NEAS.2023-09-06_2fb2828307d03c3f9db51e4883e14178_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    2fb2828307d03c3f9db51e4883e14178

  • SHA1

    aa393ea87262e2145275972aa41ddb7e23872b10

  • SHA256

    f668f828a0a4ed94caf10fbb08721064997ae5d4ed2576f9b3bc9cdc9fecd40d

  • SHA512

    a96601501b5396a29063b54fe13a7c53a8bd17f95697e198a5b4c58a02f30d9a81d2104ef2969fdebfa60187e6647a2266ead0afe4781b29c0c4dd918da70683

  • SSDEEP

    1536:s555555555555pmgSeGDjtQhnwmmB0yVMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rG:JMSjOnrmBdMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-06_2fb2828307d03c3f9db51e4883e14178_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections