General
-
Target
6773e439a28c42eb05df2717c5b8e109_gandcrab_JC.exe
-
Size
73KB
-
Sample
230804-wwmcmaeh3w
-
MD5
6773e439a28c42eb05df2717c5b8e109
-
SHA1
b5b65b5f733a887019182792ae06a7ce543c7e0f
-
SHA256
6bdd2449605a08c14d0dacaa2e111449aaf224f2fb7a25a3f13983ccd69831b6
-
SHA512
ee6af46602613254008cce7cd5305a066d1801c1a5a464bfb69697e9b18b46cce1119fd37383ce7fa646f0279ca18c30a7c9e2d11a0c132d94dc9f5be7a257ee
-
SSDEEP
1536:TgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:TMSjOnrmBbMqqMmr3IdE8we0Avu5r++N
Behavioral task
behavioral1
Sample
6773e439a28c42eb05df2717c5b8e109_gandcrab_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6773e439a28c42eb05df2717c5b8e109_gandcrab_JC.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
6773e439a28c42eb05df2717c5b8e109_gandcrab_JC.exe
-
Size
73KB
-
MD5
6773e439a28c42eb05df2717c5b8e109
-
SHA1
b5b65b5f733a887019182792ae06a7ce543c7e0f
-
SHA256
6bdd2449605a08c14d0dacaa2e111449aaf224f2fb7a25a3f13983ccd69831b6
-
SHA512
ee6af46602613254008cce7cd5305a066d1801c1a5a464bfb69697e9b18b46cce1119fd37383ce7fa646f0279ca18c30a7c9e2d11a0c132d94dc9f5be7a257ee
-
SSDEEP
1536:TgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:TMSjOnrmBbMqqMmr3IdE8we0Avu5r++N
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-