General
-
Target
2d1ce8d0e9522dcbbcab0f2e9448e184_gandcrab_JC.exe
-
Size
73KB
-
Sample
230801-tcpyashb94
-
MD5
2d1ce8d0e9522dcbbcab0f2e9448e184
-
SHA1
8a752ce841380ed77d5b9341d1d0cbe7758fe6a5
-
SHA256
eacace4f3feebc232d8757655e464a336d945c31d3e64c68ded3069134bfae4f
-
SHA512
1acefde39f7334944a52b09add0d5a0d8233742641dc43f7aff4919ed9ed2f8dffe64d3942a22e1140a24f6bd4d17429970113bf90e880f5cef6c1c8638e3c34
-
SSDEEP
1536:f555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0Avul:AMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj
Behavioral task
behavioral1
Sample
2d1ce8d0e9522dcbbcab0f2e9448e184_gandcrab_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2d1ce8d0e9522dcbbcab0f2e9448e184_gandcrab_JC.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2d1ce8d0e9522dcbbcab0f2e9448e184_gandcrab_JC.exe
-
Size
73KB
-
MD5
2d1ce8d0e9522dcbbcab0f2e9448e184
-
SHA1
8a752ce841380ed77d5b9341d1d0cbe7758fe6a5
-
SHA256
eacace4f3feebc232d8757655e464a336d945c31d3e64c68ded3069134bfae4f
-
SHA512
1acefde39f7334944a52b09add0d5a0d8233742641dc43f7aff4919ed9ed2f8dffe64d3942a22e1140a24f6bd4d17429970113bf90e880f5cef6c1c8638e3c34
-
SSDEEP
1536:f555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0Avul:AMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-