General

  • Target

    NEAS.2023-09-05_5e3da0b1779d9df40108f69d9330d7c2_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    5e3da0b1779d9df40108f69d9330d7c2

  • SHA1

    adab17c0deae9bb028bf0c047472b65224a0bbe2

  • SHA256

    e64d5121cdd4d2f55a9b50186a0a8fff5cb6d3deb4611b0b87413ce567e728ab

  • SHA512

    72c54b1571bf438fb4f8d4720f24bc130fa185adb4d9d83f8588c996e64e9b49fee31863c81cb06feb410c5cc2985536b592192b9e8d7801c902dc5b86f9f457

  • SSDEEP

    1536:/gSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:/MSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-05_5e3da0b1779d9df40108f69d9330d7c2_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections