General

  • Target

    NEAS.2023-09-05_34cf26c349c26550f77d15c581962963_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    34cf26c349c26550f77d15c581962963

  • SHA1

    e7ca786c8014b811a666ddaef2a5cd228358a3e0

  • SHA256

    30f60887ba63695e886cec8b7752dbfe92a2915ec1073ebb8ec91542a3e33b17

  • SHA512

    390594bd5d04d25989496e46fac8c11226c87bd7896e60d86e88a6057536130fdc6b174765ff171862d56698ab0d16d9bca1113568a3c582e114f892baa8f19b

  • SSDEEP

    1536:055u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:mMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-05_34cf26c349c26550f77d15c581962963_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections