Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2ac8f35026472ce288bcdeeb55462244_gandcrab_JC.exe
-
Size
170KB
-
Sample
230818-rqeclsae36
-
MD5
2ac8f35026472ce288bcdeeb55462244
-
SHA1
be217ef1b61cd35bad0204e494c7c676311cb629
-
SHA256
f4c0dd93bd871b7642810f46e73fe778e5d6d80b45e9e4020fe963e02c2a4755
-
SHA512
3f2cff0daa857aea3584819dfbf1fa672f5012c6fc9b0524fc76b661cda72bf03aa32c6e10c5b8b40b2e8c8aa7c230740f42b79c38fb004a60555a1177103048
-
SSDEEP
3072:uRPI6YetSOYyM1PUVDAWpcB3/Az/O9xn6Ln+q7E/kfTOQ5N:uRNYmSlPdOO3/Y/Wyh7B7OQn
Static task
static1
Behavioral task
behavioral1
Sample
2ac8f35026472ce288bcdeeb55462244_gandcrab_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2ac8f35026472ce288bcdeeb55462244_gandcrab_JC.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
2ac8f35026472ce288bcdeeb55462244_gandcrab_JC.exe
-
Size
170KB
-
MD5
2ac8f35026472ce288bcdeeb55462244
-
SHA1
be217ef1b61cd35bad0204e494c7c676311cb629
-
SHA256
f4c0dd93bd871b7642810f46e73fe778e5d6d80b45e9e4020fe963e02c2a4755
-
SHA512
3f2cff0daa857aea3584819dfbf1fa672f5012c6fc9b0524fc76b661cda72bf03aa32c6e10c5b8b40b2e8c8aa7c230740f42b79c38fb004a60555a1177103048
-
SSDEEP
3072:uRPI6YetSOYyM1PUVDAWpcB3/Az/O9xn6Ln+q7E/kfTOQ5N:uRNYmSlPdOO3/Y/Wyh7B7OQn
Score10/10-
GandCrab payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-