General

  • Target

    NEAS.2023-09-05_2f08fc4b9b3d919856681de72be830cc_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    2f08fc4b9b3d919856681de72be830cc

  • SHA1

    d3a1f629712972407ffc5f41228ee66de243da32

  • SHA256

    66eddafd3230b6f15d0604192dc4f9382dac1bf5ef2e047bffd0029c2e3157b7

  • SHA512

    7432363786955a1a787e069278aa1e4c07e1a06e56ced4616ea40ae147c4fbea186c5d1656c27ac4fb35f30e66da8e9ed013c060b8a8645c502312568f21faff

  • SSDEEP

    1536:bgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:bMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-05_2f08fc4b9b3d919856681de72be830cc_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections