Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
cc60a92a0a6afa54e1aa8fc0aaa02c02_gandcrab_JC.exe
-
Size
73KB
-
Sample
230829-r9cywsgb3z
-
MD5
cc60a92a0a6afa54e1aa8fc0aaa02c02
-
SHA1
9346f5672b900c14dadf6fb454ab63c375c54d44
-
SHA256
9c1096ae2a2ea89d68da77cfd17064544a17b17c614e4f077731b35ee2230aaa
-
SHA512
b3cb208f7e1aa6eed5ef3cb7756d442e3293088b2505f4efeb1cead5c7ef7ba193cf41690a58b896f3b83a852aa755156fa98d1ea50b72062c751163aafdabf6
-
SSDEEP
1536:egSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:eMSjOnrmBbMqqMmr3IdE8we0Avu5r++N
Behavioral task
behavioral1
Sample
cc60a92a0a6afa54e1aa8fc0aaa02c02_gandcrab_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
cc60a92a0a6afa54e1aa8fc0aaa02c02_gandcrab_JC.exe
Resource
win10v2004-20230824-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
cc60a92a0a6afa54e1aa8fc0aaa02c02_gandcrab_JC.exe
-
Size
73KB
-
MD5
cc60a92a0a6afa54e1aa8fc0aaa02c02
-
SHA1
9346f5672b900c14dadf6fb454ab63c375c54d44
-
SHA256
9c1096ae2a2ea89d68da77cfd17064544a17b17c614e4f077731b35ee2230aaa
-
SHA512
b3cb208f7e1aa6eed5ef3cb7756d442e3293088b2505f4efeb1cead5c7ef7ba193cf41690a58b896f3b83a852aa755156fa98d1ea50b72062c751163aafdabf6
-
SSDEEP
1536:egSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:eMSjOnrmBbMqqMmr3IdE8we0Avu5r++N
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-