General

  • Target

    NEAS.2023-09-06_ec753ae373fb915896347331e9e1d048_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    ec753ae373fb915896347331e9e1d048

  • SHA1

    b0f5767e320300aa6a15f629dc0335d6bc5ac018

  • SHA256

    b43fa55a9876cf3270a49c088fe766d0b31086985c2324df0bdfcc40f0c87715

  • SHA512

    0213e2e41d7fa0b464b5ea5c940c164cbfdff38e81e90e4d0affe884fd20df355c0210e14dd345a1c7eeab0aa148a72bc31c99e2afbcf139c156c1cc4e7417fe

  • SSDEEP

    1536:8555555555555pmgSeGDjtQhnwmmB0yVMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rG:5MSjOnrmBdMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-06_ec753ae373fb915896347331e9e1d048_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections