General

  • Target

    NEAS.2023-09-26_a635c9675a100157af304df5e961cc12_gandcrab.exe

  • Size

    73KB

  • MD5

    a635c9675a100157af304df5e961cc12

  • SHA1

    b904300874be785510d8e1dc6eb8bdcf7b3d5961

  • SHA256

    06a41031edf7e72b0ee6f59ed2e45c08a2c02daaf25d2b2bd30a5d7ae3687231

  • SHA512

    315274e47ff349a2651ff34c0ace42ffa8be40bbb9696c3ba3014e968875aeb5c73c908f0ff73b3e954f7152caea783bb828402286f1e4a2389296a1b8391f2f

  • SSDEEP

    1536:r555555555555pmgSeGDjtQhnwmmB0yKMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rf:sMSjOnrmBiMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-26_a635c9675a100157af304df5e961cc12_gandcrab.exe
    .exe windows:5 windows x86

    40306b615af659fc1f93cfb121cc38d9


    Headers

    Imports

    Sections