Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024010669579d93758d00aa23570dbdc472e964gandcrab.exe
-
Size
145KB
-
Sample
240107-yktnnsdaen
-
MD5
69579d93758d00aa23570dbdc472e964
-
SHA1
b849ea8dd3dacc9536e9b1d9bdd2e14c5f5a010a
-
SHA256
521fd2f9f6dab605a921cb5c20a37fc0a02af858f6730a6141dc415ce3321013
-
SHA512
fb48ce46ad0c8883c9364f2c3a7860340489c2effc03245c7ac42b70f1b674c5b7186aabc600968d7ecf14ae594d43ab446491f654b34e5a9e04a42792812b04
-
SSDEEP
3072:TYHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:TyOqqDL64vdGREz
Behavioral task
behavioral1
Sample
2024010669579d93758d00aa23570dbdc472e964gandcrab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024010669579d93758d00aa23570dbdc472e964gandcrab.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024010669579d93758d00aa23570dbdc472e964gandcrab.exe
-
Size
145KB
-
MD5
69579d93758d00aa23570dbdc472e964
-
SHA1
b849ea8dd3dacc9536e9b1d9bdd2e14c5f5a010a
-
SHA256
521fd2f9f6dab605a921cb5c20a37fc0a02af858f6730a6141dc415ce3321013
-
SHA512
fb48ce46ad0c8883c9364f2c3a7860340489c2effc03245c7ac42b70f1b674c5b7186aabc600968d7ecf14ae594d43ab446491f654b34e5a9e04a42792812b04
-
SSDEEP
3072:TYHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:TyOqqDL64vdGREz
Score10/10-
GandCrab payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-