General

  • Target

    NEAS.2023-09-05_40f741d4211ec621227f99c54a5bfb1f_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    40f741d4211ec621227f99c54a5bfb1f

  • SHA1

    e2d8148b76712b730000e655f2efd52af7638802

  • SHA256

    54a9ff7bf527d9ba161bae589760223eff1ecc3218f6ac2c39657e097da055be

  • SHA512

    f8da08acc29afb323a6f9879d16f2465394730ccba08b23c6c532d76a73b046c85f7cc18e9f955fdf0884ae88318e517659aed77a710b889f92f3d0ce89bd366

  • SSDEEP

    1536:o555555555555pmgSeGDjtQhnwmmB0yVMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rG:lMSjOnrmBdMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-05_40f741d4211ec621227f99c54a5bfb1f_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections