Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
52745bf51f98e23db5a432ce0ce15ab2_gandcrab_JC.exe
-
Size
73KB
-
Sample
230820-m42ylseh35
-
MD5
52745bf51f98e23db5a432ce0ce15ab2
-
SHA1
cc9a3b6a7a11193d30d05858e9f257240f663272
-
SHA256
7591b024576ccca625260269149db428469e3b3ccd2dce2bf4c6ac37de9acb2e
-
SHA512
ca10b5eb4f74337e4f3ae7c84bfb363db2393c623f423c6eb680dce4c46e625a19c2af6d48924b0f6fac47a5b710ee1acbecb152b473c652696b37861ddbc70a
-
SSDEEP
1536:IgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:IMSjOnrmBbMqqMmr3IdE8we0Avu5r++N
Behavioral task
behavioral1
Sample
52745bf51f98e23db5a432ce0ce15ab2_gandcrab_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
52745bf51f98e23db5a432ce0ce15ab2_gandcrab_JC.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
52745bf51f98e23db5a432ce0ce15ab2_gandcrab_JC.exe
-
Size
73KB
-
MD5
52745bf51f98e23db5a432ce0ce15ab2
-
SHA1
cc9a3b6a7a11193d30d05858e9f257240f663272
-
SHA256
7591b024576ccca625260269149db428469e3b3ccd2dce2bf4c6ac37de9acb2e
-
SHA512
ca10b5eb4f74337e4f3ae7c84bfb363db2393c623f423c6eb680dce4c46e625a19c2af6d48924b0f6fac47a5b710ee1acbecb152b473c652696b37861ddbc70a
-
SSDEEP
1536:IgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:IMSjOnrmBbMqqMmr3IdE8we0Avu5r++N
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-