General

  • Target

    NEAS.2023-09-09_34bc709d8bd27e2160a48de3617c4373_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    34bc709d8bd27e2160a48de3617c4373

  • SHA1

    26677abf624c3451de7a9ac9701ae5dffd5ff8b2

  • SHA256

    300d70728ce98829df6f53d5ff60ff502e78e94a4f7443f37bb85e5c68d9e37b

  • SHA512

    824ea17efdd42fe88cc66765843380d9b1af8ee5d7074e14d898d96232e8d53c1e57352e754107d73259f89c016db2b282490eae8e73270ab6cb5289c3b28d17

  • SSDEEP

    1536:v55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:bMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-09_34bc709d8bd27e2160a48de3617c4373_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections