General
-
Target
NEAS.9b1afa6c0c9899d9a6dcd2f2f151d440_JC.exe
-
Size
73KB
-
Sample
231105-vg754shb6s
-
MD5
9b1afa6c0c9899d9a6dcd2f2f151d440
-
SHA1
c1fc0eacfef90e666d30bda1f8190dba093b5a42
-
SHA256
4d1822b8829e41af0f8a363b08d6777468a7b602cbff9999cf15b37d3ce6c016
-
SHA512
76fab8a29449d95cc030df5043447988a64b9b865dcd08c989a8c6fd23ed83aa29a9b46a02a0cebe87bfb7ae796063c79714833b0fef09019c744114b200d974
-
SSDEEP
1536:MgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:MMSjOnrmBbMqqMmr3IdE8we0Avu5r++N
Behavioral task
behavioral1
Sample
NEAS.9b1afa6c0c9899d9a6dcd2f2f151d440_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.9b1afa6c0c9899d9a6dcd2f2f151d440_JC.exe
Resource
win10v2004-20231020-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
NEAS.9b1afa6c0c9899d9a6dcd2f2f151d440_JC.exe
-
Size
73KB
-
MD5
9b1afa6c0c9899d9a6dcd2f2f151d440
-
SHA1
c1fc0eacfef90e666d30bda1f8190dba093b5a42
-
SHA256
4d1822b8829e41af0f8a363b08d6777468a7b602cbff9999cf15b37d3ce6c016
-
SHA512
76fab8a29449d95cc030df5043447988a64b9b865dcd08c989a8c6fd23ed83aa29a9b46a02a0cebe87bfb7ae796063c79714833b0fef09019c744114b200d974
-
SSDEEP
1536:MgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:MMSjOnrmBbMqqMmr3IdE8we0Avu5r++N
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-