Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

5beaee3f0c4fa6_JC.exe

windows7-x64

10

5beaee3f0c4fa6_JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5beaee3f0c4fa6_JC.exe

  • Size

    145KB

  • Sample

    230716-kjxgaaee5v

  • MD5

    5beaee3f0c4fa66759c7f3b97037024e

  • SHA1

    609970dfb54f623a88dc085e68d6b51c68bd613a

  • SHA256

    343137b587844a02d11e5ba3557e71604889aefba8182db1942ff05bacd5d317

  • SHA512

    72044abce5632d12e1d6de9481111e4ecab400c936e3cf39e1bb89297cc133d2f702c90f8a4e3fcc5f3521226a19b6acafd8596cb9ace04a17fd680e4491c29f

  • SSDEEP

    3072:rYHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:ryOqqDL64vdGREz

Score
10/10
gandcrabbackdoorpersistenceransomware

Malware Config

Targets

    • Target

      5beaee3f0c4fa6_JC.exe

    • Size

      145KB

    • MD5

      5beaee3f0c4fa66759c7f3b97037024e

    • SHA1

      609970dfb54f623a88dc085e68d6b51c68bd613a

    • SHA256

      343137b587844a02d11e5ba3557e71604889aefba8182db1942ff05bacd5d317

    • SHA512

      72044abce5632d12e1d6de9481111e4ecab400c936e3cf39e1bb89297cc133d2f702c90f8a4e3fcc5f3521226a19b6acafd8596cb9ace04a17fd680e4491c29f

    • SSDEEP

      3072:rYHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:ryOqqDL64vdGREz

    Score
    10/10
    gandcrabbackdoorpersistenceransomware

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

      ransomwarebackdoorgandcrab

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks