General
-
Target
5c3cab097c17243f6e14b88d118305ad_gandcrab_JC.exe
-
Size
73KB
-
Sample
230821-syf2vadg49
-
MD5
5c3cab097c17243f6e14b88d118305ad
-
SHA1
ddda4e67955043fce865a56b34e8626412b3d44c
-
SHA256
458c24c00765d929d5c009b3dedf9b36f0c518ec884b9f4c536cdb5d52a74028
-
SHA512
bce0627ee76579a709118ab09dffe32475d9e7591256d32c3a754c4d4ffa4a09d7e07b9144f5bfdaecbcf821763d358aaee82f5c94146a8e66c7db7606b0ac2f
-
SSDEEP
1536:/555555555555pmgSeGDjtQhnwmmB0yeMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r8:gMSjOnrmBWMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
5c3cab097c17243f6e14b88d118305ad_gandcrab_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5c3cab097c17243f6e14b88d118305ad_gandcrab_JC.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
5c3cab097c17243f6e14b88d118305ad_gandcrab_JC.exe
-
Size
73KB
-
MD5
5c3cab097c17243f6e14b88d118305ad
-
SHA1
ddda4e67955043fce865a56b34e8626412b3d44c
-
SHA256
458c24c00765d929d5c009b3dedf9b36f0c518ec884b9f4c536cdb5d52a74028
-
SHA512
bce0627ee76579a709118ab09dffe32475d9e7591256d32c3a754c4d4ffa4a09d7e07b9144f5bfdaecbcf821763d358aaee82f5c94146a8e66c7db7606b0ac2f
-
SSDEEP
1536:/555555555555pmgSeGDjtQhnwmmB0yeMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r8:gMSjOnrmBWMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-