General

  • Target

    NEAS.2023-09-07_0fb8e0456289a7d35eb16a1636690bcf_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    0fb8e0456289a7d35eb16a1636690bcf

  • SHA1

    bb7d78c4e0cda59198f493e572b6618abb060bf2

  • SHA256

    6469a9e56be70504a2067e1144434b49fa51c25c2e8ed67f1685bba3634d856e

  • SHA512

    0ca1fc622d66c303e040ba471ad71b7b5d72175f2717c46001b12c41d3aa8ce516cdf40b24f93d4e4a931bf1fecd7869e1d88e59f1a5bc02bcd52420f541cbeb

  • SSDEEP

    1536:sgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:sMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-07_0fb8e0456289a7d35eb16a1636690bcf_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections