General

  • Target

    NEAS.2023-09-05_490f71db312de6297f2cacb6c220bdd1_gandcrab_JC.exe

  • Size

    73KB

  • MD5

    490f71db312de6297f2cacb6c220bdd1

  • SHA1

    dc0b59e4d73796c7566804ddde6bfbf4197a607a

  • SHA256

    9d4390c88adbeed7840b2334cfc472781b8af5f9dcbdeeea114dbdfb17142646

  • SHA512

    a5ce86cf830d0a341de8c3a48c0232a711ed61aa2caf1aace5d252e9900e8121c08f881e1fdc77eaf3ee8e5c5c0828120c6de318f3ef6a2dfc4c59a5ba81f44d

  • SSDEEP

    1536:q55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:wMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-05_490f71db312de6297f2cacb6c220bdd1_gandcrab_JC.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections